Closed Bug 1790357 Opened 2 years ago Closed 2 years ago

ECH client - On resumption discard TLS < 1.2 session ids/tickets if ECH configs are setup.

Categories

(NSS :: Libraries, defect)

3.80
defect

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: lschwarz, Assigned: lschwarz)

References

(Blocks 1 open bug)

Details

Attachments

(1 file)

NSS ECH client does perform resumption if it posses TLS 1.2 session tickets from a previous connection AND ECH configs are setup. It must discard the 'deprecated' resumption ids and start a new connection offering ECH.

Bug discovered through BoGo (BoringSSL test) 'TLS-ECH-Client-TLS12Session(ID|Ticket)'.

The severity field is not set for this bug.
:beurdouche, could you have a look please?

For more information, please visit auto_nag documentation.

Flags: needinfo?(bbeurdouche)
Status: ASSIGNED → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Flags: needinfo?(bbeurdouche)
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: