[trafficserver] branch master updated: SSL: Always renew TLS Session Tickets iff TLSv1.3 is being used

[vgutierrez]

This is an automated email from the ASF dual-hosted git repository.

vgutierrez pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/trafficserver.git


The following commit(s) were added to refs/heads/master by this push:
     new 61dc6aa  SSL: Always renew TLS Session Tickets iff TLSv1.3 is being 
used
     new 0e5f7d0  Merge pull request #6573 from jvgutierrez/renew-tlsv13-tickets
61dc6aa is described below

commit 61dc6aa3e90e8d65a96122fadd74c896f4045aad
Author: Valentin Gutierrez <vgutier...@wikimedia.org>
AuthorDate: Thu Mar 26 18:13:15 2020 +0000

    SSL: Always renew TLS Session Tickets iff TLSv1.3 is being used
---
 iocore/net/SSLSessionTicket.cc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/iocore/net/SSLSessionTicket.cc b/iocore/net/SSLSessionTicket.cc
index de7bce5..63769f9 100644
--- a/iocore/net/SSLSessionTicket.cc
+++ b/iocore/net/SSLSessionTicket.cc
@@ -102,8 +102,8 @@ ssl_callback_session_ticket(SSL *ssl, unsigned char 
*keyname, unsigned char *iv,
 
         netvc.setSSLSessionCacheHit(true);
 
-#if TS_HAS_TLS_EARLY_DATA
-        if (SSL_version(ssl) >= TLS1_3_VERSION && 
config->server_max_early_data > 0) {
+#ifdef TLS1_3_VERSION
+        if (SSL_version(ssl) >= TLS1_3_VERSION) {
           Debug("ssl_session_ticket", "make sure tickets are only used once.");
           return 2;
         }