commit fd89acc7357c53b432141bb2d341ca104f77bc85
author Gilles Peskine <Gilles.Peskine@arm.com> Mon Feb 24 18:45:49 2025 +0100
committer Gilles Peskine <Gilles.Peskine@arm.com> Mon Feb 24 18:48:49 2025 +0100
tree 2d19a318f41284e579acc0d16e8cea6ae0131ede
parent eb2d29eb6bdce5b90e31ce2a8a4eb1826ee5d8b7

ssl_session_reset: preserve HOSTNAME_SET flag

When we don't reset `ssl->hostname`, we must not reset the
`MBEDTLS_SSL_CONTEXT_FLAG_HOSTNAME_SET` flag either.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index 6c401b5..0b072e6 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -1411,7 +1411,7 @@
     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;
 
     ssl->state = MBEDTLS_SSL_HELLO_REQUEST;
-    ssl->flags = 0;
+    ssl->flags &= MBEDTLS_SSL_CONTEXT_FLAGS_KEEP_AT_SESSION;
     ssl->tls_version = ssl->conf->max_tls_version;
 
     mbedtls_ssl_session_reset_msg_layer(ssl, partial);