Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <pgsql-bugs-owner+archive@lists.postgresql.org>)
	id 1seyBz-00F13G-JW
	for pgsql-bugs@arkaria.postgresql.org; Fri, 16 Aug 2024 14:44:39 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.94.2)
	(envelope-from <pgsql-bugs-owner+archive@lists.postgresql.org>)
	id 1seyBy-005nG6-4p
	for pgsql-bugs@arkaria.postgresql.org; Fri, 16 Aug 2024 14:44:38 +0000
Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29])
	by malur.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <tgl@sss.pgh.pa.us>)
	id 1seyBx-005nFy-Sp
	for pgsql-bugs@lists.postgresql.org; Fri, 16 Aug 2024 14:44:37 +0000
Received: from sss.pgh.pa.us ([68.162.161.243])
	by magus.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <tgl@sss.pgh.pa.us>)
	id 1seyBv-005AOR-PS
	for pgsql-bugs@lists.postgresql.org; Fri, 16 Aug 2024 14:44:37 +0000
Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1])
	by sss.pgh.pa.us (8.15.2/8.15.2) with ESMTP id 47GEiPtb742118;
	Fri, 16 Aug 2024 10:44:25 -0400
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Daniel Gustafsson <daniel@yesql.se>
cc: Jacob Champion <jacob.champion@enterprisedb.com>,
        Cameron Vogt <cvogt@automaticcontrols.net>,
        "pgsql-bugs@lists.postgresql.org" <pgsql-bugs@lists.postgresql.org>
Subject: Re: TLS session tickets disabled?
In-reply-to: <20FADBBF-886A-48ED-BB0A-6560D90424A6@yesql.se>
References: 
 <6aca4816-be12-4f54-9eba-8c9b55cdc801.094840f8-2c1e-4d5a-9984-8ac00be38080.1f3171ea-77be-4931-bfa7-87210a40ff9f@emailsignatures365.codetwo.com>
 <DM6PR16MB3145CF62857226F350C710D1AB852@DM6PR16MB3145.namprd16.prod.outlook.com>
 <45862.1723572334@sss.pgh.pa.us>
 <DM6PR16MB3145B2AE690E9717C63D0C9CAB862@DM6PR16MB3145.namprd16.prod.outlook.com>
 <DM6PR16MB31455B7F25D9A788B1C0EF17AB872@DM6PR16MB3145.namprd16.prod.outlook.com>
 <CAOYmi+=o+REWkgJa4URz8Cp_m2xd+g+YPJbk77BrYhNUfynWag@mail.gmail.com>
 <9164991D-65CE-4461-9A81-C23C93E68D44@yesql.se>
 <20FADBBF-886A-48ED-BB0A-6560D90424A6@yesql.se>
Comments: In-reply-to Daniel Gustafsson <daniel@yesql.se>
	message dated "Fri, 16 Aug 2024 10:11:32 +0200"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <742116.1723819465.1@sss.pgh.pa.us>
Content-Transfer-Encoding: quoted-printable
Date: Fri, 16 Aug 2024 10:44:25 -0400
Message-ID: <742117.1723819465@sss.pgh.pa.us>
List-Id: <pgsql-bugs.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-bugs@lists.postgresql.org>
List-Owner: <mailto:pgsql-bugs-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-bugs>
Archived-At: 
 <https://www.postgresql.org/message-id/742117.1723819465%40sss.pgh.pa.us>
Precedence: bulk

Daniel Gustafsson <daniel@yesql.se> writes:
> On 15 Aug 2024, at 19:52, Jacob Champion <jacob.champion@enterprisedb.co=
m> wrote:
>>> I'm getting the feeling that this is our bug, and that we should be
>>> using both SSL_OP_NO_TICKET (for TLSv1.2) and SSL_CTX_set_num_tickets
>>> (for TLSv1.3). I don't see any indication in the docs or source that
>>> the latter does anything for 1.2.

> The attached, backpatched all the way, should be the correct fix.  Sorry=
 for
> the mess =3D(

Can we verify that this fixes the originally-reported problem?

			regards, tom lane