lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-07-28 00:21:48 +03:00
Code Activity

fix various issues

Browse Source 
- get ticket_flags with function.
- improve output message and check it.
- improve `ssl_server2` help message

Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
This commit is contained in:
Jerry Yu
2023-11-21 17:06:36 +08:00
parent 3db60dfe5e
commit ea96ac3da9
3 changed files with 9 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
library/ssl_tls13_server.c
View File

@ -1850,7 +1850,8 @@ static void ssl_tls13_update_early_data_status(mbedtls_ssl_context *ssl)
MBEDTLS_SSL_TLS1_3_TICKET_ALLOW_EARLY_DATA) == 0) {
MBEDTLS_SSL_DEBUG_MSG(
1,
("EarlyData: rejected, denied by ticket permission bits."));
("EarlyData: rejected, early_data not allowed in ticket "
"permission bits."));
return;
}
@ -3222,10 +3223,11 @@ static int ssl_tls13_write_nst_early_data_ext(mbedtls_ssl_context *ssl,
unsigned char *p = buf;
*out_len = 0;
if ((ssl->session->ticket_flags &
MBEDTLS_SSL_TLS1_3_TICKET_ALLOW_EARLY_DATA) == 0) {
if (mbedtls_ssl_session_get_ticket_flags(
ssl->session, MBEDTLS_SSL_TLS1_3_TICKET_ALLOW_EARLY_DATA) == 0) {
MBEDTLS_SSL_DEBUG_MSG(
4, ("Skip early_data extension in NST for it is not allowed."));
4, ("early_data not allowed, skip early_data extension in "
"NewSessionTicket"));
return 0;
}