commit d636dd0cbbb638bee889cad47b88fbbb9e9bf653
author Hanno Becker <hanno.becker@arm.com> Tue Aug 21 13:55:31 2018 +0100
committer Hanno Becker <hanno.becker@arm.com> Wed Aug 22 15:05:07 2018 +0100
tree 715ffc6f2fbe0f47982a0ce529ec9fe62f08834e
parent 16fe2fd15a7383043c97baebbe9f3a8047c88f04

Fix bug in SSL ticket implementation removing keys of age < 1s

Fixes #1968.

library/ssl_ticket.c

diff --git a/library/ssl_ticket.c b/library/ssl_ticket.c
index 0e27900..a27d2ec 100644
--- a/library/ssl_ticket.c
+++ b/library/ssl_ticket.c
@@ -101,7 +101,7 @@
         uint32_t current_time = (uint32_t) time( NULL );
         uint32_t key_time = ctx->keys[ctx->active].generation_time;
 
-        if( current_time > key_time &&
+        if( current_time >= key_time &&
             current_time - key_time < ctx->ticket_lifetime )
         {
             return( 0 );