ticket_lifetime_hint may exceed 1 week in TLSv1.3
authorTodd Short <todd.short@me.com>
Wed, 23 Mar 2022 22:55:10 +0000 (18:55 -0400)
committerTodd Short <todd.short@me.com>
Fri, 25 Mar 2022 16:46:15 +0000 (12:46 -0400)
commit0089cc7f9d42f6e39872161199fb8b6a99da2492
tree7bb4e2d785cf687ca07ed65796750543549e7268
parent37816ef5757e458be9648481e56bf698ee3bfbb1
ticket_lifetime_hint may exceed 1 week in TLSv1.3

For TLSv1.3, limit ticket lifetime hint to 1 week per RFC8446

Fixes #17948

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17952)
doc/man3/SSL_CTX_set_timeout.pod
ssl/statem/statem_srvr.c
test/sslapitest.c