Harden TLS 1.3 NewSessionTicket handling per RFC 9846 - #11178

Draft

julek-wolfssl wants to merge 5 commits into

wolfSSL:masterfrom

julek-wolfssl:fix/rfc9846-session-ticket-compliance

Commits on Aug 14, 2026

Only send TLS 1.3 NewSessionTicket when the client advertised PSK modes
julek-wolfssl
committed
0ed5a51
Check NewSessionTicket extension framing without early data
julek-wolfssl
committed
534b9a9
Match the full server ID length in the client session cache
julek-wolfssl
committed
ef6c03f
Make the NewSessionTicket PSK mode check opt-in
julek-wolfssl
committed
7072ea6
Assert unrecognized NewSessionTicket extensions keep the connection up
julek-wolfssl
committed
063b9c5