commit 1483dc3bdedfc3279f84e4aa26427cf7e0c82851
author Ronald Cron <ronald.cron@arm.com> Fri Jan 19 10:00:47 2024 +0100
committer Ronald Cron <ronald.cron@arm.com> Fri Feb 02 17:31:20 2024 +0100
tree 90170b7b818f46e1e22f43c44695446a0c175a63
parent 2995d35ac344376acc5e18d3f39e1b6afc6917cb

tls13: cli: Indicate early data only in first ClientHello

Signed-off-by: Ronald Cron <ronald.cron@arm.com>

library/ssl_tls13_client.c

diff --git a/library/ssl_tls13_client.c b/library/ssl_tls13_client.c
index 76f0f18..2598bae 100644
--- a/library/ssl_tls13_client.c
+++ b/library/ssl_tls13_client.c
@@ -1182,7 +1182,8 @@
 #if defined(MBEDTLS_SSL_EARLY_DATA)
     if (mbedtls_ssl_conf_tls13_is_some_psk_enabled(ssl) &&
         ssl_tls13_early_data_has_valid_ticket(ssl) &&
-        ssl->conf->early_data_enabled == MBEDTLS_SSL_EARLY_DATA_ENABLED) {
+        ssl->conf->early_data_enabled == MBEDTLS_SSL_EARLY_DATA_ENABLED &&
+        ssl->handshake->hello_retry_request_count == 0) {
 
         ret = mbedtls_ssl_tls13_write_early_data_ext(
             ssl, 0, p, end, &ext_len);