TLS 1.2 session tickets storage to handle lifetime hints better

XMLWordPrintable

    • Type: Bug
    • Resolution: Unresolved
    • Priority: P4
    • tbd
    • Affects Version/s: 17, 21, 25, 26
    • Component/s: security-libs
    • None

      Stateless session tickets currently reject any lifetimes greater than 7 days. This is correct for the TLS 1.3, but 1.2 uses a lifetime hint that suggests a lifetime length. If the hint is greater than the current max or 0, it shouldn't reject the ticket. RFC 5077 spec allows the client to store the ticket for a length of it's choosing.

            Assignee:
            Anthony Scarpino
            Reporter:
            Anthony Scarpino
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: