commit 4f77ecf40957aca1ad8519b5ccf05caf4043b8bc
author Jerry Yu <jerry.h.yu@arm.com> Mon Oct 10 22:10:08 2022 +0800
committer Jerry Yu <jerry.h.yu@arm.com> Mon Oct 10 22:10:08 2022 +0800
tree 6c3cf7f3424505218d9a08fbc1e77eebadf413c8
parent 03aa174d7c42e02c1a122c5ee6b43af2965319f5

disable session resumption when ticket expired

Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>

library/ssl_tls13_client.c

diff --git a/library/ssl_tls13_client.c b/library/ssl_tls13_client.c
index ee4c24d..6227f3d 100644
--- a/library/ssl_tls13_client.c
+++ b/library/ssl_tls13_client.c
@@ -681,7 +681,8 @@
 static int ssl_tls13_has_configured_ticket( mbedtls_ssl_context *ssl )
 {
     mbedtls_ssl_session *session = ssl->session_negotiate;
-    return( session != NULL && session->ticket != NULL );
+    return( ssl->handshake->resume &&
+            session != NULL && session->ticket != NULL );
 }
 
 MBEDTLS_CHECK_RETURN_CRITICAL