Merge pull request #8302 from cconlon/sessTickLenCheck

Loosen MAX_PSK_ID_LEN check in TLSX_PopulateExtensions() to only server side
wolfSSL · Dec 19, 2024 · 00f83fa · 00f83fa
2 parents 8fa238e + 1101841
commit 00f83fa
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/tls.c b/src/tls.c
@@ -13781,7 +13781,7 @@ int TLSX_PopulateExtensions(WOLFSSL* ssl, byte isServer)
                 word64 now, milli;
             #endif
 
-                if (sess->ticketLen > MAX_PSK_ID_LEN) {
+                if (isServer && (sess->ticketLen > MAX_PSK_ID_LEN)) {
                     WOLFSSL_MSG("Session ticket length for PSK ext is too large");
                     return BUFFER_ERROR;
                 }