mirror of
https://github.com/XTLS/REALITY.git
synced 2025-08-22 14:38:35 +00:00
crypto/tls: fix cipher suite check when doing 0-RTT resumption
Change-Id: Ia50898308b80149f862457f9cd9f1123da4e6b6f Reviewed-on: https://go-review.googlesource.com/c/go/+/498215 Reviewed-by: Filippo Valsorda <filippo@golang.org> Reviewed-by: Macrombi Lux <macrentals502@gmail.com> TryBot-Result: Gopher Robot <gobot@golang.org> Reviewed-by: Damien Neil <dneil@google.com> Auto-Submit: Filippo Valsorda <filippo@golang.org> Reviewed-by: Michael Knyszek <mknyszek@google.com> Run-TryBot: Filippo Valsorda <filippo@golang.org>
This commit is contained in:
parent
7e0808395e
commit
cab35d601f
@ -376,7 +376,7 @@ func (c *Conn) loadSession(hello *clientHelloMsg) (
|
||||
if c.quic != nil && session.EarlyData {
|
||||
// For 0-RTT, the cipher suite has to match exactly, and we need to be
|
||||
// offering the same ALPN.
|
||||
if mutualCipherSuite(hello.cipherSuites, session.cipherSuite) != nil {
|
||||
if mutualCipherSuiteTLS13(hello.cipherSuites, session.cipherSuite) != nil {
|
||||
for _, alpn := range hello.alpnProtocols {
|
||||
if alpn == session.alpnProtocol {
|
||||
hello.earlyData = true
|
||||
|
Loading…
Reference in New Issue
Block a user