TLS 1.3 resumed session does not retain peer certificate chain

XMLWordPrintable

    • b20
    • Verified

        TLS 1.3 resumed sessions are not preserving the peer certificate chain that is held in the initial SSLSession object created from the initial handshake. The SSLSession object pulled from the resumed session will throw SSLPeerUnverifiedException when SSLSession.getPeerCertificates() or SSLSession.getPeerPrincipal() methods are invoked.

              Assignee:
              Jamil Nimeh
              Reporter:
              Jamil Nimeh
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: