pg.ddx.io  pgsql-bugs@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Daniel Gustafsson <daniel@yesql.se>
Cc: Jacob Champion <jacob.champion@enterprisedb.com>
Cc: Cameron Vogt <cvogt@automaticcontrols.net>
Cc: pgsql-bugs@lists.postgresql.org <pgsql-bugs@lists.postgresql.org>
Subject: Re: TLS session tickets disabled?
Date: Fri, 16 Aug 2024 10:44:25 -0400
Message-ID: <742117.1723819465@sss.pgh.pa.us> (raw)
In-Reply-To: <20FADBBF-886A-48ED-BB0A-6560D90424A6@yesql.se>
References: <6aca4816-be12-4f54-9eba-8c9b55cdc801.094840f8-2c1e-4d5a-9984-8ac00be38080.1f3171ea-77be-4931-bfa7-87210a40ff9f@emailsignatures365.codetwo.com>
	<DM6PR16MB3145CF62857226F350C710D1AB852@DM6PR16MB3145.namprd16.prod.outlook.com>
	<45862.1723572334@sss.pgh.pa.us>
	<DM6PR16MB3145B2AE690E9717C63D0C9CAB862@DM6PR16MB3145.namprd16.prod.outlook.com>
	<DM6PR16MB31455B7F25D9A788B1C0EF17AB872@DM6PR16MB3145.namprd16.prod.outlook.com>
	<CAOYmi+=o+REWkgJa4URz8Cp_m2xd+g+YPJbk77BrYhNUfynWag@mail.gmail.com>
	<9164991D-65CE-4461-9A81-C23C93E68D44@yesql.se>
	<20FADBBF-886A-48ED-BB0A-6560D90424A6@yesql.se>

Daniel Gustafsson <daniel@yesql.se> writes:
> On 15 Aug 2024, at 19:52, Jacob Champion <jacob.champion@enterprisedb.com> wrote:
>>> I'm getting the feeling that this is our bug, and that we should be
>>> using both SSL_OP_NO_TICKET (for TLSv1.2) and SSL_CTX_set_num_tickets
>>> (for TLSv1.3). I don't see any indication in the docs or source that
>>> the latter does anything for 1.2.

> The attached, backpatched all the way, should be the correct fix.  Sorry for
> the mess =(

Can we verify that this fixes the originally-reported problem?

			regards, tom lane





view thread (13+ messages)  latest in thread

Message-ID: <742117.1723819465@sss.pgh.pa.us>
Permalink:  ../742117.1723819465@sss.pgh.pa.us/
Also on:    postgresql.org/message-id/742117.1723819465@sss.pgh.pa.us

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-bugs@postgresql.org
  Cc: tgl@sss.pgh.pa.us, daniel@yesql.se, jacob.champion@enterprisedb.com, cvogt@automaticcontrols.net, pgsql-bugs@lists.postgresql.org
  Subject: Re: TLS session tickets disabled?
  In-Reply-To: <742117.1723819465@sss.pgh.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox