Avoid "excessive message size" for session tickets
authorMatt Caswell <matt@openssl.org>
Wed, 23 Jun 2021 07:54:12 +0000 (08:54 +0100)
committerPauli <pauli@openssl.org>
Tue, 6 Jul 2021 00:54:37 +0000 (10:54 +1000)
commite54f0c9b2fe3dd2dcb5e8100e2c69e5b2f6eb681
tree5a2fce8f0f0c9245aa462413cda50aad92a022ad
parent2f61bc17d42bce0d5958cabc971f4f1343353fb3
Avoid "excessive message size" for session tickets

We received a report of an "excessive message size" for a received
session ticket. Our maximum size was significantly less than the theoretical
maximum. The server may put any data it likes in the session ticket
including (for example) the full certificate chain so we should be able to
handle longer tickets. Update the value to the maximum allowed by the spec.

Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/15877)
ssl/statem/statem_clnt.c
ssl/statem/statem_local.h