RT2772: accept empty SessionTicket
authorEmilia Kasper <emilia@openssl.org>
Wed, 23 Sep 2015 17:29:18 +0000 (19:29 +0200)
committerEmilia Kasper <emilia@openssl.org>
Mon, 28 Sep 2015 14:13:45 +0000 (16:13 +0200)
commit64ec479559d359cb18cc9dc94b6503a624831eee
tree6539877f1c0d0d1d90e0cd7234d57b250b87af5e
parent7794c355eadd49d2fc1670b1dc8ac19f1e93c26f
RT2772: accept empty SessionTicket

RFC 5077 section 3.3 says: If the server determines that it does not
want to include a ticket after it has included the SessionTicket
extension in the ServerHello, then it sends a zero-length ticket in the
NewSessionTicket handshake message.

Previously the client would fail upon attempting to allocate a
zero-length buffer. Now, we have the client ignore the empty ticket and
keep the existing session.

Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit 21b538d616b388fa0ce64ef54da3504253895cf8)
ssl/s3_clnt.c