Disable Session Caching if Client Auth is enabled
@@ -253,7 +253,8 @@ int s2n_conn_set_handshake_type(struct s2n_connection *conn)
/* A handshake type has been negotiated */
conn->handshake.handshake_type = NEGOTIATED;
- if (s2n_is_caching_enabled(conn->config)) {
+ /* Only check cache for Session ID if Client Auth is not configured */
+ if (conn->client_cert_auth_type == S2N_CERT_AUTH_NONE && s2n_is_caching_enabled(conn->config)) {
if (!s2n_resume_from_cache(conn)) {
return 0;
}
