[trafficserver] branch 9.2.x updated: TLS Session Resumption: fix timed out session (#8667)

[zw...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

zwoop pushed a commit to branch 9.2.x
in repository https://gitbox.apache.org/repos/asf/trafficserver.git


The following commit(s) were added to refs/heads/9.2.x by this push:
     new 813a12f  TLS Session Resumption: fix timed out session (#8667)
813a12f is described below

commit 813a12fc2494c4ba494f3cbf0a861533a93d346e
Author: Mo Chen <un...@gmail.com>
AuthorDate: Mon Feb 14 14:11:06 2022 -0600

    TLS Session Resumption: fix timed out session (#8667)
    
    Reverts the behavior of getOriginSession() for a timed out session to the previous behavior, where it returns a null session pointer.
    
    (cherry picked from commit c82122ebad10801efe60ef9d2fd454b8f358094c)
---
 iocore/net/TLSSessionResumptionSupport.cc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/iocore/net/TLSSessionResumptionSupport.cc b/iocore/net/TLSSessionResumptionSupport.cc
index af22b2e..36cfbb5 100644
--- a/iocore/net/TLSSessionResumptionSupport.cc
+++ b/iocore/net/TLSSessionResumptionSupport.cc
@@ -184,6 +184,7 @@ TLSSessionResumptionSupport::getOriginSession(SSL *ssl, const std::string &looku
     if (is_ssl_session_timed_out(shared_sess.get())) {
       SSL_INCREMENT_DYN_STAT(ssl_origin_session_cache_miss);
       origin_sess_cache->remove_session(lookup_key);
+      shared_sess.reset();
     } else {
       SSL_INCREMENT_DYN_STAT(ssl_origin_session_cache_hit);
       this->_setSSLSessionCacheHit(true);