tree 93bac2193958ac265be703adef72b3169d71271d
parent 4aef687fcff7d0b4a6f2942a5b21c97f8da33097
author David Benjamin <davidben@google.com> 1617125873 -0400
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1617128123 +0000

Enforce that pre_shared_key must come with psk_key_exchange_modes.

Omitting the extension means we'll never issue tickets, but if the
client were to offer a ticket anyway, RFC8446 4.2.9 says we MUST reject
the ClientHello. It's not clear on what alert to use, but
missing_extension is probably appropriate.

Thanks to Ben Kaduk for pointing this out.

Change-Id: Ie5c720eac9dd2e1a27ba8a13c59b707c109eaa4e
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/46464
Commit-Queue: David Benjamin <davidben@google.com>
Commit-Queue: Adam Langley <agl@google.com>
Reviewed-by: Adam Langley <agl@google.com>