From 97dfc726f342131ad99f8d7f5a7b03dc6789ee9c Mon Sep 17 00:00:00 2001 From: Ronald Cron Date: Fri, 8 Mar 2024 16:34:59 +0100 Subject: [PATCH] ssl_ticket.c: Fix ticket lifetime when parsing This is the lifetime of the key used to decrypt the ticket that should be used when parsing a ticket, not the ticket module lifetime that may have been changed since the key was created. Signed-off-by: Ronald Cron --- library/ssl_ticket.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/library/ssl_ticket.c b/library/ssl_ticket.c index 5da3887b81..6a31b0bee6 100644 --- a/library/ssl_ticket.c +++ b/library/ssl_ticket.c @@ -504,7 +504,7 @@ int mbedtls_ssl_ticket_parse(void *p_ticket, #if defined(MBEDTLS_HAVE_TIME) mbedtls_ms_time_t ticket_creation_time, ticket_age; mbedtls_ms_time_t ticket_lifetime = - (mbedtls_ms_time_t) ctx->ticket_lifetime * 1000; + (mbedtls_ms_time_t) key->lifetime * 1000; ret = mbedtls_ssl_session_get_ticket_creation_time(session, &ticket_creation_time);