commit 28e7c554f48a61374793efd25373456a8d36a3a4
author Jerry Yu <jerry.h.yu@arm.com> Fri Nov 10 12:05:56 2023 +0800
committer Jerry Yu <jerry.h.yu@arm.com> Tue Nov 21 09:58:19 2023 +0800
tree a1c65b0559f45f21c0ea2e0c56841f8bf1aea693
parent 3ff0b1fda3faa242ac023c62441c6c578b8024c4

Change the bottom of tolerance window

The unit of ticket time has been changed to milliseconds.
And age difference might be negative

Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>

library/ssl_tls13_server.c

diff --git a/library/ssl_tls13_server.c b/library/ssl_tls13_server.c
index fb579d5..e7800f1 100644
--- a/library/ssl_tls13_server.c
+++ b/library/ssl_tls13_server.c
@@ -234,7 +234,7 @@
      */
     client_age = obfuscated_ticket_age - session->ticket_age_add;
     age_diff = server_age - client_age;
-    if (age_diff < -1000 ||
+    if (age_diff < -MBEDTLS_SSL_TLS1_3_TICKET_AGE_TOLERANCE ||
         age_diff > MBEDTLS_SSL_TLS1_3_TICKET_AGE_TOLERANCE) {
         MBEDTLS_SSL_DEBUG_MSG(
             3, ("Ticket age outside tolerance window ( diff = %"