492c9aa90c
Historically, OpenSSL filled in a fake session ID for ticket-only client sessions. Conscrypt relies on this to implement some weird Java API where every session has an ID and may be queried out of the client session cache and, e.g., revoked that way. (Note that a correct client session cache is not keyed by session ID and indeed this allows one server to knock out another server's sessions by matching session IDs. But existing APIs are existing APIs.) For consistency between TLS 1.2 and TLS 1.3, as well as matching OpenSSL's TLS 1.3 implementation, do the same in TLS 1.3. Note this smooths over our cross-version resumption tests by allowing for something odd: it is now syntactically possible to resume a TLS 1.3 session at TLS 1.2. It doesn't matter either way, but now a different codepath rejects certain cases. Change-Id: I9caf4f0c3b2e2e24ae25752826d47bce77e65616 Reviewed-on: https://boringssl-review.googlesource.com/31525 Reviewed-by: Steven Valdez <svaldez@google.com> Commit-Queue: David Benjamin <davidben@google.com> CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> |
||
|---|---|---|
| .. | ||
| curve25519 | ||
| ed25519 | ||
| poly1305 | ||
| alert.go | ||
| cert.pem | ||
| chacha20_poly1305_test.go | ||
| chacha20_poly1305.go | ||
| channel_id_key.pem | ||
| cipher_suites.go | ||
| common.go | ||
| conn.go | ||
| deterministic.go | ||
| dtls.go | ||
| ecdsa_p224_cert.pem | ||
| ecdsa_p224_key.pem | ||
| ecdsa_p256_cert.pem | ||
| ecdsa_p256_key.pem | ||
| ecdsa_p384_cert.pem | ||
| ecdsa_p384_key.pem | ||
| ecdsa_p521_cert.pem | ||
| ecdsa_p521_key.pem | ||
| ed25519_cert.pem | ||
| ed25519_key.pem | ||
| fuzzer_mode.json | ||
| handshake_client.go | ||
| handshake_messages.go | ||
| handshake_server.go | ||
| hkdf_test.go | ||
| hkdf.go | ||
| key_agreement.go | ||
| key.pem | ||
| packet_adapter.go | ||
| prf.go | ||
| recordingconn.go | ||
| rsa_1024_cert.pem | ||
| rsa_1024_key.pem | ||
| rsa_chain_cert.pem | ||
| rsa_chain_key.pem | ||
| runner_test.go | ||
| runner.go | ||
| shim_ticket.go | ||
| sign.go | ||
| test_output.go | ||
| ticket.go | ||
| tls.go | ||