Horton

Disable all TLS session tickets

Daniel Gustafsson <dgustafsson@postgresql.org>

View on postgr.es
Commit: 118ec331bfb7c781c03613de22de015229535a3b
Author: Daniel Gustafsson <dgustafsson@postgresql.org>
Date: 2024-07-26T09:09:45Z
Releases: 15.8 
Disable all TLS session tickets

OpenSSL supports two types of session tickets for TLSv1.3, stateless
and stateful. The option we've used only turns off stateless tickets
leaving stateful tickets active. Use the new API introduced in 1.1.1
to disable all types of tickets.

Backpatch to all supported versions.

Reviewed-by: Heikki Linnakangas <hlinnaka@iki.fi>
Reported-by: Andres Freund <andres@anarazel.de>
Discussion: https://postgr.es/m/20240617173803.6alnafnxpiqvlh3g@awork3.anarazel.de
Backpatch-through: v12

Files

PathChange+/−
configure modified +5 −4
configure.ac modified +1 −1
src/backend/libpq/be-secure-openssl.c modified +13 −1
src/include/pg_config.h.in modified +3 −0

Discussion