pgsql: Fix regression in TLS session ticket disabling - Mailing list pgsql-committers

From Daniel Gustafsson
Subject pgsql: Fix regression in TLS session ticket disabling
Date
Msg-id E1sg0JT-000Pr9-23@gemulon.postgresql.org
Whole thread Raw
List pgsql-committers
Fix regression in TLS session ticket disabling

Commit 274bbced disabled session tickets for TLSv1.3 on top of the
already disabled TLSv1.2 session tickets, but accidentally caused
a regression where TLSv1.2 session tickets were incorrectly sent.
Fix by unconditionally disabling TLSv1.2 session tickets and only
disable TLSv1.3 tickets when the right version of OpenSSL is used.

Backpatch to all supported branches.

Reported-by: Cameron Vogt <cvogt@automaticcontrols.net>
Reported-by: Fire Emerald <fire.github@gmail.com>
Reviewed-by: Jacob Champion <jacob.champion@enterprisedb.com>
Discussion: https://postgr.es/m/DM6PR16MB3145CF62857226F350C710D1AB852@DM6PR16MB3145.namprd16.prod.outlook.com
Backpatch-through: v12

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/4fdb6558c2709c799643d26f3f956395ae72a8ef

Modified Files
--------------
src/backend/libpq/be-secure-openssl.c | 3 +--
1 file changed, 1 insertion(+), 2 deletions(-)


pgsql-committers by date:

Previous
From: Thomas Munro
Date:
Subject: pgsql: Fix harmless LC_COLLATE[_MASK] confusion.
Next
From: Daniel Gustafsson
Date:
Subject: pgsql: Fix regression in TLS session ticket disabling