Clarify SCT resumption comment Change-Id: I35de23635dbc56fb355492fefa1c052a1fdb4fb8 Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/69827 Reviewed-by: David Benjamin <davidben@google.com> Commit-Queue: David Benjamin <davidben@google.com>
diff --git a/ssl/test/runner/runner.go b/ssl/test/runner/runner.go index 18ed78b..97eac02 100644 --- a/ssl/test/runner/runner.go +++ b/ssl/test/runner/runner.go
@@ -8516,8 +8516,10 @@ differentSCTList = append(differentSCTList, testSCTList...) differentSCTList[len(differentSCTList)-1] ^= 1 - // The SCT extension did not specify that it must only be sent on resumption as it - // should have, so test that we tolerate but ignore it. + // The SCT extension did not specify that it must only be sent on the inital handshake as it + // should have, so test that we tolerate but ignore it. This is only an issue pre-1.3, since + // SCTs are sent in the CertificateEntry message in 1.3, whereas they were previously sent + // in an extension in the ServerHello pre-1.3. testCases = append(testCases, testCase{ protocol: protocol, name: "SendSCTListOnResume-" + suffix,