Skip to content

Comments

Ignore the status_request extension in a resumption handshake#5896

Closed
mattcaswell wants to merge 1 commit intoopenssl:masterfrom
mattcaswell:no-status-on-resume
Closed

Ignore the status_request extension in a resumption handshake#5896
mattcaswell wants to merge 1 commit intoopenssl:masterfrom
mattcaswell:no-status-on-resume

Conversation

@mattcaswell
Copy link
Member

We cannot provide a certificate status on a resumption so we should
ignore this extension in that case.

Fixes #1662

Actually the issues discussed in #1662 do not apply to master anyway. We accidentally fixed it a while ago. However we should still not process in the incoming extension. Other PRs will address 1.1.0 and 1.0.2 where the issue does still exist.

We cannot provide a certificate status on a resumption so we should
ignore this extension in that case.

Fixes openssl#1662
@mattcaswell
Copy link
Member Author

See also #5897 and #5898 for the 1.1.0 and 1.0.2 versions.

@mattcaswell
Copy link
Member Author

Pushed. Thanks.

levitte pushed a commit that referenced this pull request Apr 17, 2018
We cannot provide a certificate status on a resumption so we should
ignore this extension in that case.

Fixes #1662

Reviewed-by: Rich Salz <[email protected]>
Reviewed-by: Ben Kaduk <[email protected]>
(Merged from #5896)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

branch: master Applies to master branch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

status_request extension should not be sent on resumption

3 participants