mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-02-28 00:39:56 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

remove MBEDTLS_ERR_SSL_TICKET_INVALID_KEX_MODE error

Browse Source 
Return MBEDTLS_ERR_ERROR_GENERIC_ERROR when ticket_flags
are not compatible with advertised key exchange mode.

Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>
This commit is contained in:
Pengyu Lv 2023-01-12 12:28:09 +08:00
parent 80270b2151
commit 189465306d
2 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
include/mbedtls/ssl.h
View File

@ -96,8 +96,7 @@
/* Error space gap */
/** Processing of the Certificate handshake message failed. */
#define MBEDTLS_ERR_SSL_BAD_CERTIFICATE -0x7A00
/** No suitable key exchange mode for ticket */
#define MBEDTLS_ERR_SSL_TICKET_INVALID_KEX_MODE -0x7A80
/* Error space gap */
/**
* Received NewSessionTicket Post Handshake Message.
* This error code is experimental and may be changed or removed without notice.

2
library/ssl_tls13_server.c
View File

@ -169,7 +169,7 @@ static int ssl_tls13_offered_psks_check_identity_match_ticket(
*
* We regard the ticket with incompatible key exchange modes as not match.
*/
ret = MBEDTLS_ERR_SSL_TICKET_INVALID_KEX_MODE;
ret = MBEDTLS_ERR_ERROR_GENERIC_ERROR;
MBEDTLS_SSL_DEBUG_TICKET_FLAGS(4,
session->ticket_flags);
if (mbedtls_ssl_tls13_check_kex_modes(ssl,