Skip to content

Ignore the status_request extension in a resumption handshake (1.0.2)#5898

Closed
mattcaswell wants to merge 1 commit intoopenssl:OpenSSL_1_0_2-stablefrom
mattcaswell:no-status-on-resume-102
Closed

Ignore the status_request extension in a resumption handshake (1.0.2)#5898
mattcaswell wants to merge 1 commit intoopenssl:OpenSSL_1_0_2-stablefrom
mattcaswell:no-status-on-resume-102

Conversation

@mattcaswell
Copy link
Member

We cannot provide a certificate status on a resumption so we should
ignore this extension in that case.

Fixes #1662

This is the 1.0.2 version of #5896

We cannot provide a certificate status on a resumption so we should
ignore this extension in that case.

Fixes openssl#1662
goto err;
} else if (type == TLSEXT_TYPE_status_request) {

} else if (type == TLSEXT_TYPE_status_request && !s->hit) {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

do we need to increment data by size if we're skipping processing?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No, it does that at the end of the loop

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That will teach me, only looking at the top of the loop...

levitte pushed a commit that referenced this pull request Apr 17, 2018
We cannot provide a certificate status on a resumption so we should
ignore this extension in that case.

Fixes #1662

Reviewed-by: Rich Salz <[email protected]>
(Merged from #5898)
@mattcaswell
Copy link
Member Author

Pushed. Thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

branch: 1.0.2 Applies to OpenSSL_1_0_2-stable branch (EOL)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants