TLS session tickets disabled?
Cameron Vogt <cvogt@automaticcontrols.net>
From: Cameron Vogt <cvogt@automaticcontrols.net>
To: "pgsql-bugs@lists.postgresql.org" <pgsql-bugs@lists.postgresql.org>
Date: 2024-08-12T21:19:22Z
Lists: pgsql-bugs
I recently updated one of my PostgreSQL databases to 16.4. Since updating, I am unable to refresh Power BI reports that rely on the database. The error message in my PostgreSQL server's log file is "could not accept SSL connection: session id context uninitialized". I looked up the error message and found my issue in another mailing list: https://www.postgresql.org/message-id/CADT4RqBU8N-csyZuzaook-c795dt22Zcwg1aHWB6tfVdAkodZA%40mail.gmail.com. After reading the old thread, it looks like the resolution was to make the PostgreSQL server pass SSL_OP_NO_TICKET to SSL_CTX_set_options. I believe the 16.4 update has resurrected this issue. In the 16.4 release notes, I found a bullet point that says: "Disable creation of stateful TLS session tickets by OpenSSL. This avoids possible failures with clients that think receipt of a session ticket means that TLS session resumption is supported." Would it be possible to get this change reverted in the next update? Thank you, Cameron Vogt Don't forget to RSVP<https://www.punchbowl.com/parties/1042a7af321e873a512c> for our annual Customer Appreciation Day! September 20th, 2024, from 11am-3pm Cameron Vogt | Software Developer Direct:314-756-2302<tel:314-756-2302> | Cell: 636-388-2050<tel:636-388-2050> cvogt@automaticcontrols.net 1585 Fencorp Drive<https://www.google.com/maps/dir/38.5384448,-90.43968/Automatic+Controls+Equipment+Systems,+Inc.+Fenton,+MO+63026/@38.5371308,-90.448053,16z/data=!3m1!4b1!4m9!4m8!1m1!4e1!1m5!1m1!1s0x87d8cfa7d0262fa3:0x8de9b691c07a1768!2m2!1d-90.4476712!2d38.5358207> <https://www.google.com/maps/dir/38.5384448,-90.43968/Automatic+Controls+Equipment+Systems,+Inc.+Fenton,+MO+63026/@38.5371308,-90.448053,16z/data=!3m1!4b1!4m9!4m8!1m1!4e1!1m5!1m1!1s0x87d8cfa7d0262fa3:0x8de9b691c07a1768!2m2!1d-90.4476712!2d38.5358207>Fenton, Missouri 63026<https://www.google.com/maps/dir/38.5384448,-90.43968/Automatic+Controls+Equipment+Systems,+Inc.+Fenton,+MO+63026/@38.5371308,-90.448053,16z/data=!3m1!4b1!4m9!4m8!1m1!4e1!1m5!1m1!1s0x87d8cfa7d0262fa3:0x8de9b691c07a1768!2m2!1d-90.4476712!2d38.5358207> [cid:aces_66e9dd1e-ddf8-4d47-aa75-b72eea6ea7eb.png] [cid:supportlink_28817f99-b936-4867-8557-910a1c601d21.png]<https://automaticcontrols.net/request-support/>
Commits
-
Fix regression in TLS session ticket disabling
- f925b7f65d49 13.17 landed
- cd98a142cb37 12.21 landed
- 9333174af475 16.5 landed
- 8cea8c023edf 14.14 landed
- 4fdb6558c270 18.0 landed
- 23c200940eae 15.9 landed
- 19021d28cdf0 17.0 landed