From f39a02c68abc8936db24499cb3cfcba206a2e7eb Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Wed, 19 Sep 2018 10:09:39 +0100 Subject: Fix the max psk len for TLSv1.3 If using an old style TLSv1.2 PSK callback then the maximum possible PSK len is PSK_MAX_PSK_LEN (256) - not 64. Fixes #7261 Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/7267) --- ssl/ssl_locl.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'ssl') diff --git a/ssl/ssl_locl.h b/ssl/ssl_locl.h index 8afb117372..440a5d6c19 100644 --- a/ssl/ssl_locl.h +++ b/ssl/ssl_locl.h @@ -471,7 +471,7 @@ struct ssl_method_st { long (*ssl_ctx_callback_ctrl) (SSL_CTX *s, int cb_id, void (*fp) (void)); }; -# define TLS13_MAX_RESUMPTION_PSK_LENGTH 64 +# define TLS13_MAX_RESUMPTION_PSK_LENGTH PSK_MAX_PSK_LEN /*- * Lets make this into an ASN.1 type structure as follows -- cgit v1.2.3