dbs/postgres
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Disable all TLS session tickets

Browse source 
OpenSSL supports two types of session tickets for TLSv1.3, stateless
and stateful. The option we've used only turns off stateless tickets
leaving stateful tickets active. Use the new API introduced in 1.1.1
to disable all types of tickets.

Backpatch to all supported versions.

Reviewed-by: Heikki Linnakangas <hlinnaka@iki.fi>
Reported-by: Andres Freund <andres@anarazel.de>
Discussion: https://postgr.es/m/20240617173803.6alnafnxpiqvlh3g@awork3.anarazel.de
Backpatch-through: v12
This commit is contained in:
Daniel Gustafsson 2024-07-26 11:09:45 +02:00
parent 8a1a4087bd
commit 3df7f44a8c
5 changed files with 23 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

1
meson.build
View file

@ -1362,6 +1362,7 @@ if sslopt in ['auto', 'openssl']
# Function introduced in OpenSSL 1.1.1
['X509_get_signature_info'],
['SSL_CTX_set_num_tickets'],
]
are_openssl_funcs_complete = true