lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-07-28 00:21:48 +03:00
Code Activity

Add server name check when proposeing pre-share key

Browse Source 
Signed-off-by: Xiaokang Qian <xiaokang.qian@arm.com>
This commit is contained in:
Xiaokang Qian
2022-09-20 11:35:41 +00:00
parent 8fd3254cfc
commit 281fd1bdd8
6 changed files with 197 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
library/ssl_tls13_server.c
View File

@ -235,6 +235,20 @@ static int ssl_tls13_offered_psks_check_identity_match_ticket(
(int)age_diff_in_ms ) );
goto exit;
}
#if 0
#if defined(MBEDTLS_SSL_SERVER_NAME_INDICATION)
if( ssl->session_negotiate->hostname != NULL &&
ssl->session_negotiate->hostname_len != 0 &&
memcmp( ssl->session_negotiate->hostname,
ssl->session->hostname, ssl->session->hostname_len ) != 0 )
{
MBEDTLS_SSL_DEBUG_MSG(
3, ( "Session hostname not matched with stored session ticket" ) );
goto exit;
}
#endif /* MBEDTLS_SSL_SERVER_NAME_INDICATION */
#endif
ret = 0;