-
Type:
Bug
-
Resolution: Unresolved
-
Priority:
P4
-
Affects Version/s: 17, 21, 25, 26
-
Component/s: security-libs
-
None
Stateless session tickets currently reject any lifetimes greater than 7 days. This is correct for the TLS 1.3, but 1.2 uses a lifetime hint that suggests a lifetime length. If the hint is greater than the current max or 0, it shouldn't reject the ticket. RFC 5077 spec allows the client to store the ticket for a length of it's choosing.