commit 281fd1bdd8aacc3c68ea42e305a5ed2469635571
author Xiaokang Qian <xiaokang.qian@arm.com> Tue Sep 20 11:35:41 2022 +0000
committer Xiaokang Qian <xiaokang.qian@arm.com> Wed Oct 12 11:03:41 2022 +0000
tree 8db8d88724d4005014a3e9fcad4df0eb5156c02c
parent 8fd3254cfcd8116ff50b139be6ab3f1b93094c73

Add server name check when proposeing pre-share key

Signed-off-by: Xiaokang Qian <xiaokang.qian@arm.com>

library/ssl_tls13_server.c

diff --git a/library/ssl_tls13_server.c b/library/ssl_tls13_server.c
index 61a1bad..60b1e05 100644
--- a/library/ssl_tls13_server.c
+++ b/library/ssl_tls13_server.c
@@ -235,6 +235,20 @@
                  (int)age_diff_in_ms ) );
         goto exit;
     }
+#if 0
+#if defined(MBEDTLS_SSL_SERVER_NAME_INDICATION)
+        if( ssl->session_negotiate->hostname != NULL &&
+            ssl->session_negotiate->hostname_len != 0 &&
+            memcmp( ssl->session_negotiate->hostname,
+            ssl->session->hostname, ssl->session->hostname_len ) != 0 )
+        {
+            MBEDTLS_SSL_DEBUG_MSG(
+            3, ( "Session hostname not matched with stored session ticket" ) );
+            goto exit;
+        }
+
+#endif /* MBEDTLS_SSL_SERVER_NAME_INDICATION */
+#endif
 
     ret = 0;