commit 7b711710b289f6d5c36d2c240ec6fde06e8c3d6d
author Pengyu Lv <pengyu.lv@arm.com> Tue Oct 24 17:07:14 2023 +0800
committer Pengyu Lv <pengyu.lv@arm.com> Tue Oct 24 17:07:14 2023 +0800
tree cb3584e48f60c40b1c5414f15b3f277c8f5b5eea
parent ed5e4e86a5e307a758980972e2c7e628ad09b2ab

Add check_ticket_flags helper function

Signed-off-by: Pengyu Lv <pengyu.lv@arm.com>

library/ssl_misc.h

diff --git a/library/ssl_misc.h b/library/ssl_misc.h
index a99bb33..9444c29 100644
--- a/library/ssl_misc.h
+++ b/library/ssl_misc.h
@@ -2779,6 +2779,12 @@
            (flags & MBEDTLS_SSL_TLS1_3_TICKET_FLAGS_MASK);
 }
 
+static inline unsigned int mbedtls_ssl_session_check_ticket_flags(
+    mbedtls_ssl_session *session, unsigned int flags)
+{
+    return mbedtls_ssl_session_get_ticket_flags(session, flags) == 0;
+}
+
 static inline void mbedtls_ssl_session_set_ticket_flags(
     mbedtls_ssl_session *session, unsigned int flags)
 {

library/ssl_tls13_server.c

diff --git a/library/ssl_tls13_server.c b/library/ssl_tls13_server.c
index 87eaa19..2561239 100644
--- a/library/ssl_tls13_server.c
+++ b/library/ssl_tls13_server.c
@@ -998,7 +998,7 @@
 {
 #if defined(MBEDTLS_SSL_SESSION_TICKETS)
     if (ssl->handshake->resume) {
-        if (!mbedtls_ssl_session_get_ticket_flags(
+        if (mbedtls_ssl_session_check_ticket_flags(
                 ssl->session_negotiate, kex_mode)) {
             return 0;
         }