| From: | Daniel Gustafsson <dgustafsson(at)postgresql(dot)org> |
|---|---|
| To: | pgsql-committers(at)lists(dot)postgresql(dot)org |
| Subject: | pgsql: Disable all TLS session tickets |
| Date: | 2024-07-26 09:27:02 |
| Message-ID: | E1sXHE6-001HcR-R1@gemulon.postgresql.org |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-committers |
Disable all TLS session tickets
OpenSSL supports two types of session tickets for TLSv1.3, stateless
and stateful. The option we've used only turns off stateless tickets
leaving stateful tickets active. Use the new API introduced in 1.1.1
to disable all types of tickets.
Backpatch to all supported versions.
Reviewed-by: Heikki Linnakangas <hlinnaka(at)iki(dot)fi>
Reported-by: Andres Freund <andres(at)anarazel(dot)de>
Discussion: https://postgr.es/m/20240617173803.6alnafnxpiqvlh3g@awork3.anarazel.de
Backpatch-through: v12
Branch
------
REL_12_STABLE
Details
-------
https://git.postgresql.org/pg/commitdiff/32121c077d69e22ed4686d7ae3a9c637f3a64d85
Modified Files
--------------
configure | 9 +++++----
configure.in | 2 +-
src/backend/libpq/be-secure-openssl.c | 16 ++++++++++++++--
src/include/pg_config.h.in | 3 +++
4 files changed, 23 insertions(+), 7 deletions(-)
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Fujii Masao | 2024-07-26 11:49:00 | pgsql: doc: Enhance documentation for postgres_fdw_get_connections() ou |
| Previous Message | Daniel Gustafsson | 2024-07-26 09:26:49 | pgsql: Disable all TLS session tickets |