ticket_lifetime_hint may exceed 1 week in TLSv1.3
authorTodd Short <todd.short@me.com>
Wed, 23 Mar 2022 22:55:10 +0000 (18:55 -0400)
committerTodd Short <todd.short@me.com>
Fri, 25 Mar 2022 16:49:41 +0000 (12:49 -0400)
commita24462bd1e796722a903067ab247220a38b46dc5
tree765b43dbbed368a426523081066055f144d1e1f7
parent3299313d05f278dbea326ecbb461506a9a212690
ticket_lifetime_hint may exceed 1 week in TLSv1.3

For TLSv1.3, limit ticket lifetime hint to 1 week per RFC8446

Fixes #17948

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17952)

(cherry picked from commit 0089cc7f9d42f6e39872161199fb8b6a99da2492)
doc/man3/SSL_CTX_set_timeout.pod
ssl/statem/statem_srvr.c
test/sslapitest.c