Add a TODO around handling of SSL_get_session() and SSL_get1_session()
authorMatt Caswell <matt@openssl.org>
Fri, 13 Jan 2017 13:34:49 +0000 (13:34 +0000)
committerMatt Caswell <matt@openssl.org>
Mon, 30 Jan 2017 10:17:52 +0000 (10:17 +0000)
commite7a28df70bcf8677df6c5270eff8bbe8858b8fe9
tree1304c4303edeb83afba1fa0952e5c5063c17c23d
parentde1df7e9f2d03d2eb368093b0268de333f6f1b18
Add a TODO around handling of SSL_get_session() and SSL_get1_session()

These functions are problematic in TLSv1.3 because the server sends the
NewSessionTicket message after the handshake has finished.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2259)
ssl/ssl_sess.c