pgsql: Disable all TLS session tickets

From: Daniel Gustafsson <dgustafsson(at)postgresql(dot)org>
To: pgsql-committers(at)lists(dot)postgresql(dot)org
Subject: pgsql: Disable all TLS session tickets
Date: 2024-07-26 09:19:30
Message-ID: E1sXH6o-001HWW-9z@gemulon.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers

Disable all TLS session tickets

OpenSSL supports two types of session tickets for TLSv1.3, stateless
and stateful. The option we've used only turns off stateless tickets
leaving stateful tickets active. Use the new API introduced in 1.1.1
to disable all types of tickets.

Backpatch to all supported versions.

Reviewed-by: Heikki Linnakangas <hlinnaka(at)iki(dot)fi>
Reported-by: Andres Freund <andres(at)anarazel(dot)de>
Discussion: https://postgr.es/m/20240617173803.6alnafnxpiqvlh3g@awork3.anarazel.de
Backpatch-through: v12

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/274bbced85383e831ddeb9d83a8af74c4992e7a1

Modified Files
--------------
configure | 9 +++++----
configure.ac | 2 +-
meson.build | 1 +
src/backend/libpq/be-secure-openssl.c | 14 +++++++++++++-
src/include/pg_config.h.in | 3 +++
5 files changed, 23 insertions(+), 6 deletions(-)

Browse pgsql-committers by date

  From Date Subject
Next Message Daniel Gustafsson 2024-07-26 09:20:10 pgsql: Disable all TLS session tickets
Previous Message Amit Langote 2024-07-26 07:43:43 pgsql: SQL/JSON: Fix error-handling of some JsonBehavior expressions