mirror of
https://github.com/openssl/openssl.git
synced 2024-12-09 05:51:54 +08:00
c39e4048b5
When early data support was first added, this seemed like a good idea, as it would allow applications to just add SSL_read_early_data() calls as needed and have things "Just Work". However, for applications that do not use TLS 1.3 early data, there is a negative side effect. Having a nonzero max_early_data in a SSL_CTX (and thus, SSL objects derived from it) means that when generating a session ticket, tls_construct_stoc_early_data() will indicate to the client that the server supports early data. This is true, in that the implementation of TLS 1.3 (i.e., OpenSSL) does support early data, but does not necessarily indicate that the server application supports early data, when the default value is nonzero. In this case a well-intentioned client would send early data along with its resumption attempt, which would then be ignored by the server application, a waste of network bandwidth. Since, in order to successfully use TLS 1.3 early data, the application must introduce calls to SSL_read_early_data(), it is not much additional burden to require that the application also calls SSL_{CTX_,}set_max_early_data() in order to enable the feature; doing so closes this scenario where early data packets would be sent on the wire but ignored. Update SSL_read_early_data.pod accordingly, and make s_server and our test programs into applications that are compliant with the new requirements on applications that use early data. Fixes #4725 Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/5483) |
||
---|---|---|
.. | ||
demoSRP | ||
app_rand.c | ||
apps.c | ||
apps.h | ||
asn1pars.c | ||
bf_prefix.c | ||
build.info | ||
ca-cert.srl | ||
ca-key.pem | ||
ca-req.pem | ||
ca.c | ||
CA.pl.in | ||
cert.pem | ||
ciphers.c | ||
client.pem | ||
cms.c | ||
crl2p7.c | ||
crl.c | ||
ct_log_list.cnf | ||
dgst.c | ||
dh1024.pem | ||
dh2048.pem | ||
dh4096.pem | ||
dhparam.c | ||
dsa512.pem | ||
dsa1024.pem | ||
dsa-ca.pem | ||
dsa-pca.pem | ||
dsa.c | ||
dsap.pem | ||
dsaparam.c | ||
ec.c | ||
ecparam.c | ||
enc.c | ||
engine.c | ||
errstr.c | ||
gendsa.c | ||
genpkey.c | ||
genrsa.c | ||
nseq.c | ||
ocsp.c | ||
openssl-vms.cnf | ||
openssl.c | ||
openssl.cnf | ||
opt.c | ||
passwd.c | ||
pca-cert.srl | ||
pca-key.pem | ||
pca-req.pem | ||
pkcs7.c | ||
pkcs8.c | ||
pkcs12.c | ||
pkey.c | ||
pkeyparam.c | ||
pkeyutl.c | ||
prime.c | ||
privkey.pem | ||
progs.pl | ||
rand.c | ||
rehash.c | ||
req.c | ||
req.pem | ||
rsa8192.pem | ||
rsa.c | ||
rsautl.c | ||
s512-key.pem | ||
s512-req.pem | ||
s1024key.pem | ||
s1024req.pem | ||
s_apps.h | ||
s_cb.c | ||
s_client.c | ||
s_server.c | ||
s_socket.c | ||
s_time.c | ||
server2.pem | ||
server.pem | ||
server.srl | ||
sess_id.c | ||
smime.c | ||
speed.c | ||
spkac.c | ||
srp.c | ||
storeutl.c | ||
testCA.pem | ||
testdsa.h | ||
testrsa.h | ||
timeouts.h | ||
ts.c | ||
tsget.in | ||
verify.c | ||
version.c | ||
vms_decc_init.c | ||
vms_term_sock.c | ||
vms_term_sock.h | ||
win32_init.c | ||
x509.c |