Mbed-TLS/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-10-06 08:57:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

Change the bottom of tolerance window

Browse Source 
The unit of ticket time has been changed to milliseconds.
And age difference might be negative

Signed-off-by: Jerry Yu <[email protected]>
This commit is contained in:
Jerry Yu
2023-11-21 09:58:19 +08:00
parent 3ff0b1fda3
commit 28e7c554f4
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
library/ssl_tls13_server.c
+1 -1
View File
@@ -234,7 +234,7 @@ static int ssl_tls13_offered_psks_check_identity_match_ticket(
*/
client_age = obfuscated_ticket_age - session->ticket_age_add;
age_diff = server_age - client_age;
if (age_diff < -1000 ||
if (age_diff < -MBEDTLS_SSL_TLS1_3_TICKET_AGE_TOLERANCE ||
age_diff > MBEDTLS_SSL_TLS1_3_TICKET_AGE_TOLERANCE) {
MBEDTLS_SSL_DEBUG_MSG(
3, ("Ticket age outside tolerance window ( diff = %"