Add a TODO around validating the ticket age

Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2259)
2017-01-27 15:18:51 +00:00 · 2017-01-27 15:18:51 +00:00 · 1b8bacff8c
commit 1b8bacff8c
parent 40f805ad92
1 changed files with 2 additions and 0 deletions
--- a/ssl/statem/extensions_srvr.c
+++ b/ssl/statem/extensions_srvr.c
@ -711,6 +711,8 @@ int tls_parse_ctos_psk(SSL *s, PACKET *pkt, X509 *x, size_t chainidx, int *al)
            return 0;
        }

+        /* TODO(TLS1.3): Should we validate the ticket age? */
+
        ret = tls_decrypt_ticket(s, PACKET_data(&identity),
                                 PACKET_remaining(&identity), NULL, 0, &sess);
        if (ret == TICKET_FATAL_ERR_MALLOC || ret == TICKET_FATAL_ERR_OTHER) {