Horton

Fix regression in TLS session ticket disabling

Daniel Gustafsson <dgustafsson@postgresql.org>

View on postgr.es
Commit: 8cea8c023edfc8ab8eadd4e68a9686727f494aaf
Author: Daniel Gustafsson <dgustafsson@postgresql.org>
Date: 2024-08-19T10:55:11Z
Releases: 14.14 
Fix regression in TLS session ticket disabling

Commit 274bbced disabled session tickets for TLSv1.3 on top of the
already disabled TLSv1.2 session tickets, but accidentally caused
a regression where TLSv1.2 session tickets were incorrectly sent.
Fix by unconditionally disabling TLSv1.2 session tickets and only
disable TLSv1.3 tickets when the right version of OpenSSL is used.

Backpatch to all supported branches.

Reported-by: Cameron Vogt <cvogt@automaticcontrols.net>
Reported-by: Fire Emerald <fire.github@gmail.com>
Reviewed-by: Jacob Champion <jacob.champion@enterprisedb.com>
Discussion: https://postgr.es/m/DM6PR16MB3145CF62857226F350C710D1AB852@DM6PR16MB3145.namprd16.prod.outlook.com
Backpatch-through: v12

Files

PathChange+/−
src/backend/libpq/be-secure-openssl.c modified +1 −2

Discussion