WolfSSL
/
wolfssljni
mirror of https://github.com/wolfSSL/wolfssljni.git
1
0
Fork 0
Code Issues Releases Wiki Activity

SSLEngine: only set HandshakeStatus FINISHED when session ticket received after handshake has completed

pull/197/head
Chris Conlon 2024-05-30 15:01:15 -06:00
parent 90bf503edc
commit 399883cb5a
1 changed files with 9 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
src/java/com/wolfssl/provider/jsse/WolfSSLEngine.java
View File

@ -1096,13 +1096,17 @@ public class WolfSSLEngine extends SSLEngine {
SetHandshakeStatus(ret);
}
/* If client side and we have just received a TLS 1.3 session ticket,
* we should return FINISHED HandshakeStatus from unwrap() directly
* but not from getHandshakeStatus(). Keep track of if we have
* received ticket, so we only set/return this once */
/* If client side, handshake is done, and we have just received a
* TLS 1.3 session ticket, we should return FINISHED HandshakeStatus
* from unwrap() directly but not from getHandshakeStatus(). Keep track
* of if we have received ticket, so we only set/return this once */
synchronized (ioLock) {
if (this.getUseClientMode() && this.ssl.hasSessionTicket() &&
if (this.getUseClientMode() && this.handshakeFinished &&
this.ssl.hasSessionTicket() &&
this.sessionTicketReceived == false) {
WolfSSLDebug.log(getClass(), WolfSSLDebug.INFO,
"received session ticket, returning " +
"HandshakeStatus FINISHED");
hs = SSLEngineResult.HandshakeStatus.FINISHED;
this.sessionTicketReceived = true;
}