Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8361108

TLS 1.2 session tickets storage to handle lifetime hints better

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: P4 P4
    • 26
    • 17, 21, 25, 26
    • security-libs
    • None

      Stateless session tickets currently reject any lifetimes greater than 7 days. This is correct for the TLS 1.3, but 1.2 uses a lifetime hint that suggests a lifetime length. If the hint is greater than the current max or 0, it shouldn't reject the ticket. RFC 5077 spec allows the client to store the ticket for a length of it's choosing.

            ascarpino Anthony Scarpino
            ascarpino Anthony Scarpino
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: