瀏覽代碼

crypto/tls: skip session cache for TLS 1.3

Skip reading the session cache if TLS 1.3 is in use (the cache has no
use), skip storing a session if TLS 1.3 is in use (sessionCache can
still be set when TLS 1.2 is allowed).
tls13
Peter Wu 7 年之前
父節點
當前提交
9eb1d7faf7
共有 1 個檔案被更改,包括 3 行新增2 行删除
  1. +3
    -2
      handshake_client.go

+ 3
- 2
handshake_client.go 查看文件

@@ -119,7 +119,8 @@ func (c *Conn) clientHandshake() error {
var session *ClientSessionState
var cacheKey string
sessionCache := c.config.ClientSessionCache
if c.config.SessionTicketsDisabled {
// TLS 1.3 has no session resumption based on session tickets.
if c.config.SessionTicketsDisabled || c.config.maxVersion() >= VersionTLS13 {
sessionCache = nil
}

@@ -177,7 +178,7 @@ func (c *Conn) clientHandshake() error {

// If we had a successful handshake and hs.session is different from
// the one already cached - cache a new one
if sessionCache != nil && hs.session != nil && session != hs.session {
if sessionCache != nil && hs.session != nil && session != hs.session && c.vers < VersionTLS13 {
sessionCache.Put(cacheKey, hs.session)
}



Loading…
取消
儲存