Avoid "excessive message size" for session tickets
authorMatt Caswell <matt@openssl.org>
Wed, 23 Jun 2021 07:54:12 +0000 (08:54 +0100)
committerMatt Caswell <matt@openssl.org>
Mon, 12 Jul 2021 09:01:59 +0000 (10:01 +0100)
commit5b71c677781ca260c8d9968c103d92c44d644007
treec91de96a36bb921d02b84106a3301ad5148d0b09
parentea26844c4f624ef515d9228d3b623761a369b049
Avoid "excessive message size" for session tickets

We received a report of an "excessive message size" for a received
session ticket. Our maximum size was significantly less than the theoretical
maximum. The server may put any data it likes in the session ticket
including (for example) the full certificate chain so we should be able to
handle longer tickets. Update the value to the maximum allowed by the spec.

Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/15877)

(cherry picked from commit e54f0c9b2fe3dd2dcb5e8100e2c69e5b2f6eb681)
ssl/statem/statem_clnt.c
ssl/statem/statem_local.h