Always require an advertised NewSessionTicket message.
authorEmilia Kasper <emilia@openssl.org>
Wed, 19 Nov 2014 15:40:27 +0000 (16:40 +0100)
committerEmilia Kasper <emilia@openssl.org>
Thu, 20 Nov 2014 14:29:17 +0000 (15:29 +0100)
commit15d717f574b2aad393f1f039ca0fbcd1a0886439
treea01fa9668cbf54a82e18954d50bdee53a2d27201
parentb8712b2b9a51d65127606fd25cb549d93406b7a0
Always require an advertised NewSessionTicket message.

The server must send a NewSessionTicket message if it advertised one
in the ServerHello, so make a missing ticket message an alert
in the client.

An equivalent change was independently made in BoringSSL, see commit
6444287806d801b9a45baf1f6f02a0e3a16e144c.

Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit de2c7504ebd4ec15334ae151a31917753468f86f)

Conflicts:
CHANGES
CHANGES
ssl/s3_clnt.c