From: | Daniel Gustafsson <dgustafsson(at)postgresql(dot)org> |
---|---|
To: | pgsql-committers(at)lists(dot)postgresql(dot)org |
Subject: | pgsql: Fix regression in TLS session ticket disabling |
Date: | 2024-08-19 11:29:22 |
Message-ID: | E1sg0Zd-000PzE-TM@gemulon.postgresql.org |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-committers |
Fix regression in TLS session ticket disabling
Commit 274bbced disabled session tickets for TLSv1.3 on top of the
already disabled TLSv1.2 session tickets, but accidentally caused
a regression where TLSv1.2 session tickets were incorrectly sent.
Fix by unconditionally disabling TLSv1.2 session tickets and only
disable TLSv1.3 tickets when the right version of OpenSSL is used.
Backpatch to all supported branches.
Reported-by: Cameron Vogt <cvogt(at)automaticcontrols(dot)net>
Reported-by: Fire Emerald <fire(dot)github(at)gmail(dot)com>
Reviewed-by: Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com>
Discussion: https://postgr.es/m/DM6PR16MB3145CF62857226F350C710D1AB852@DM6PR16MB3145.namprd16.prod.outlook.com
Backpatch-through: v12
Branch
------
REL_12_STABLE
Details
-------
https://git.postgresql.org/pg/commitdiff/cd98a142cb37fbef82b94a88cd72ed936854991c
Modified Files
--------------
src/backend/libpq/be-secure-openssl.c | 3 +--
1 file changed, 1 insertion(+), 2 deletions(-)
From | Date | Subject | |
---|---|---|---|
Next Message | Tomas Vondra | 2024-08-19 11:59:24 | pgsql: Explain dropdb can't use syscache because of TOAST |
Previous Message | Daniel Gustafsson | 2024-08-19 11:29:03 | pgsql: Fix regression in TLS session ticket disabling |