Thread: pgsql: Disable all TLS session tickets
Disable all TLS session tickets OpenSSL supports two types of session tickets for TLSv1.3, stateless and stateful. The option we've used only turns off stateless tickets leaving stateful tickets active. Use the new API introduced in 1.1.1 to disable all types of tickets. Backpatch to all supported versions. Reviewed-by: Heikki Linnakangas <hlinnaka@iki.fi> Reported-by: Andres Freund <andres@anarazel.de> Discussion: https://postgr.es/m/20240617173803.6alnafnxpiqvlh3g@awork3.anarazel.de Backpatch-through: v12 Branch ------ REL_14_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/ecbb1cd9b7ec2ef30262708f30397b7d1cdab617 Modified Files -------------- configure | 9 +++++---- configure.ac | 2 +- src/backend/libpq/be-secure-openssl.c | 14 +++++++++++++- src/include/pg_config.h.in | 3 +++ 4 files changed, 22 insertions(+), 6 deletions(-)