Disable all TLS session tickets
OpenSSL supports two types of session tickets for TLSv1.3, stateless
and stateful. The option we've used only turns off stateless tickets
leaving stateful tickets active. Use the new API introduced in 1.1.1
to disable all types of tickets.
Backpatch to all supported versions.
Reviewed-by: Heikki Linnakangas <hlinnaka@iki.fi>
Reported-by: Andres Freund <andres@anarazel.de>
Discussion: https://postgr.es/m/20240617173803.6alnafnxpiqvlh3g@awork3.anarazel.de
Backpatch-through: v12
Branch
------
REL_16_STABLE
Details
-------
https://git.postgresql.org/pg/commitdiff/cc606afce1fb5c931469949f9ed8b17ec04668fb
Modified Files
--------------
configure | 9 +++++----
configure.ac | 2 +-
meson.build | 1 +
src/backend/libpq/be-secure-openssl.c | 14 +++++++++++++-
src/include/pg_config.h.in | 3 +++
5 files changed, 23 insertions(+), 6 deletions(-)
