Обсуждение: pgsql: Disable all TLS session tickets

Поиск
Список
Период
Сортировка

pgsql: Disable all TLS session tickets

От
Daniel Gustafsson
Дата:
Disable all TLS session tickets

OpenSSL supports two types of session tickets for TLSv1.3, stateless
and stateful. The option we've used only turns off stateless tickets
leaving stateful tickets active. Use the new API introduced in 1.1.1
to disable all types of tickets.

Backpatch to all supported versions.

Reviewed-by: Heikki Linnakangas <hlinnaka@iki.fi>
Reported-by: Andres Freund <andres@anarazel.de>
Discussion: https://postgr.es/m/20240617173803.6alnafnxpiqvlh3g@awork3.anarazel.de
Backpatch-through: v12

Branch
------
REL_17_STABLE

Details
-------
https://git.postgresql.org/pg/commitdiff/3df7f44a8c7c456c0a0d4d02a1167e972dc24eaa

Modified Files
--------------
configure                             |  9 +++++----
configure.ac                          |  2 +-
meson.build                           |  1 +
src/backend/libpq/be-secure-openssl.c | 14 +++++++++++++-
src/include/pg_config.h.in            |  3 +++
5 files changed, 23 insertions(+), 6 deletions(-)