pgsql: Disable all TLS session tickets - Mailing list pgsql-committers

From Daniel Gustafsson
Subject pgsql: Disable all TLS session tickets
Date
Msg-id E1sXH86-001HXo-0n@gemulon.postgresql.org
Whole thread Raw
List pgsql-committers
Disable all TLS session tickets

OpenSSL supports two types of session tickets for TLSv1.3, stateless
and stateful. The option we've used only turns off stateless tickets
leaving stateful tickets active. Use the new API introduced in 1.1.1
to disable all types of tickets.

Backpatch to all supported versions.

Reviewed-by: Heikki Linnakangas <hlinnaka@iki.fi>
Reported-by: Andres Freund <andres@anarazel.de>
Discussion: https://postgr.es/m/20240617173803.6alnafnxpiqvlh3g@awork3.anarazel.de
Backpatch-through: v12

Branch
------
REL_16_STABLE

Details
-------
https://git.postgresql.org/pg/commitdiff/cc606afce1fb5c931469949f9ed8b17ec04668fb

Modified Files
--------------
configure                             |  9 +++++----
configure.ac                          |  2 +-
meson.build                           |  1 +
src/backend/libpq/be-secure-openssl.c | 14 +++++++++++++-
src/include/pg_config.h.in            |  3 +++
5 files changed, 23 insertions(+), 6 deletions(-)


pgsql-committers by date:

Previous
From: Daniel Gustafsson
Date:
Subject: pgsql: Disable all TLS session tickets
Next
From: Daniel Gustafsson
Date:
Subject: pgsql: Disable all TLS session tickets