Validate the ticket age for resumed sessions
authorMatt Caswell <matt@openssl.org>
Fri, 24 Feb 2017 09:30:54 +0000 (09:30 +0000)
committerMatt Caswell <matt@openssl.org>
Thu, 2 Mar 2017 17:44:15 +0000 (17:44 +0000)
commit2c604cb9af4a879ea43fd7fd84883a5e97ab0fe0
treed6a0295f9263d4f671ce0b39bbc7b0231d1ac0ab
parent6746648c4270442fefc05ae25b0afcf326391b60
Validate the ticket age for resumed sessions

If the ticket age calcualtions do not check out then we must not accept
early data (it could be a replay).

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2737)
ssl/ssl_locl.h
ssl/statem/extensions_srvr.c
ssl/statem/statem_srvr.c