projects / postgresql.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6f9a62b) | patch
Disable all TLS session tickets
authorDaniel Gustafsson <[email protected]>
Fri, 26 Jul 2024 09:09:45 +0000 (11:09 +0200)
committerDaniel Gustafsson <[email protected]>
Fri, 26 Jul 2024 09:09:45 +0000 (11:09 +0200)
commit274bbced85383e831ddeb9d83a8af74c4992e7a1
tree7b7a04600b2860482263a6fd140f38963fdb4b6atree
parent6f9a62b454e8d36f57d54efa141c464f69ce9206commit | diff
Disable all TLS session tickets

OpenSSL supports two types of session tickets for TLSv1.3, stateless
and stateful. The option we've used only turns off stateless tickets
leaving stateful tickets active. Use the new API introduced in 1.1.1
to disable all types of tickets.

Backpatch to all supported versions.

Reviewed-by: Heikki Linnakangas <[email protected]>
Reported-by: Andres Freund <[email protected]>
Discussion: https://postgr.es/m/20240617173803[email protected]
Backpatch-through: v12
configure diff | blob | blame | history
configure.ac diff | blob | blame | history
meson.build diff | blob | blame | history
src/backend/libpq/be-secure-openssl.c diff | blob | blame | history
src/include/pg_config.h.in diff | blob | blame | history
This is the main PostgreSQL git repository.