Loosen MAX_PSK_ID_LEN check in TLSX_PopulateExtensions() to only serv…

…er side
wolfSSL · Dec 19, 2024 · 1101841 · 1101841
1 parent 836ee1c
commit 1101841
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/tls.c b/src/tls.c
@@ -13781,7 +13781,7 @@ int TLSX_PopulateExtensions(WOLFSSL* ssl, byte isServer)
                 word64 now, milli;
             #endif
 
-                if (sess->ticketLen > MAX_PSK_ID_LEN) {
+                if (isServer && (sess->ticketLen > MAX_PSK_ID_LEN)) {
                     WOLFSSL_MSG("Session ticket length for PSK ext is too large");
                     return BUFFER_ERROR;
                 }