pg.ddx.io pgsql-committers@postgresql.org mailing list archivehelp / color / mirror / Atom feed
pgsql: Disable all TLS session tickets 7+ messages / 1 participants [nested] [flat]
* pgsql: Disable all TLS session tickets @ 2024-07-26 09:19 Daniel Gustafsson <dgustafsson@postgresql.org> 0 siblings, 0 replies; 7+ messages in thread From: Daniel Gustafsson @ 2024-07-26 09:19 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Disable all TLS session tickets OpenSSL supports two types of session tickets for TLSv1.3, stateless and stateful. The option we've used only turns off stateless tickets leaving stateful tickets active. Use the new API introduced in 1.1.1 to disable all types of tickets. Backpatch to all supported versions. Reviewed-by: Heikki Linnakangas <hlinnaka@iki.fi> Reported-by: Andres Freund <andres@anarazel.de> Discussion: https://postgr.es/m/20240617173803.6alnafnxpiqvlh3g@awork3.anarazel.de Backpatch-through: v12 Branch ------ master Details ------- https://git.postgresql.org/pg/commitdiff/274bbced85383e831ddeb9d83a8af74c4992e7a1 Modified Files -------------- configure | 9 +++++---- configure.ac | 2 +- meson.build | 1 + src/backend/libpq/be-secure-openssl.c | 14 +++++++++++++- src/include/pg_config.h.in | 3 +++ 5 files changed, 23 insertions(+), 6 deletions(-) ^ permalink raw reply [nested|flat] 7+ messages in thread
* pgsql: Disable all TLS session tickets @ 2024-07-26 09:20 Daniel Gustafsson <dgustafsson@postgresql.org> 0 siblings, 0 replies; 7+ messages in thread From: Daniel Gustafsson @ 2024-07-26 09:20 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Disable all TLS session tickets OpenSSL supports two types of session tickets for TLSv1.3, stateless and stateful. The option we've used only turns off stateless tickets leaving stateful tickets active. Use the new API introduced in 1.1.1 to disable all types of tickets. Backpatch to all supported versions. Reviewed-by: Heikki Linnakangas <hlinnaka@iki.fi> Reported-by: Andres Freund <andres@anarazel.de> Discussion: https://postgr.es/m/20240617173803.6alnafnxpiqvlh3g@awork3.anarazel.de Backpatch-through: v12 Branch ------ REL_17_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/3df7f44a8c7c456c0a0d4d02a1167e972dc24eaa Modified Files -------------- configure | 9 +++++---- configure.ac | 2 +- meson.build | 1 + src/backend/libpq/be-secure-openssl.c | 14 +++++++++++++- src/include/pg_config.h.in | 3 +++ 5 files changed, 23 insertions(+), 6 deletions(-) ^ permalink raw reply [nested|flat] 7+ messages in thread
* pgsql: Disable all TLS session tickets @ 2024-07-26 09:20 Daniel Gustafsson <dgustafsson@postgresql.org> 0 siblings, 0 replies; 7+ messages in thread From: Daniel Gustafsson @ 2024-07-26 09:20 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Disable all TLS session tickets OpenSSL supports two types of session tickets for TLSv1.3, stateless and stateful. The option we've used only turns off stateless tickets leaving stateful tickets active. Use the new API introduced in 1.1.1 to disable all types of tickets. Backpatch to all supported versions. Reviewed-by: Heikki Linnakangas <hlinnaka@iki.fi> Reported-by: Andres Freund <andres@anarazel.de> Discussion: https://postgr.es/m/20240617173803.6alnafnxpiqvlh3g@awork3.anarazel.de Backpatch-through: v12 Branch ------ REL_16_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/cc606afce1fb5c931469949f9ed8b17ec04668fb Modified Files -------------- configure | 9 +++++---- configure.ac | 2 +- meson.build | 1 + src/backend/libpq/be-secure-openssl.c | 14 +++++++++++++- src/include/pg_config.h.in | 3 +++ 5 files changed, 23 insertions(+), 6 deletions(-) ^ permalink raw reply [nested|flat] 7+ messages in thread
* pgsql: Disable all TLS session tickets @ 2024-07-26 09:21 Daniel Gustafsson <dgustafsson@postgresql.org> 0 siblings, 0 replies; 7+ messages in thread From: Daniel Gustafsson @ 2024-07-26 09:21 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Disable all TLS session tickets OpenSSL supports two types of session tickets for TLSv1.3, stateless and stateful. The option we've used only turns off stateless tickets leaving stateful tickets active. Use the new API introduced in 1.1.1 to disable all types of tickets. Backpatch to all supported versions. Reviewed-by: Heikki Linnakangas <hlinnaka@iki.fi> Reported-by: Andres Freund <andres@anarazel.de> Discussion: https://postgr.es/m/20240617173803.6alnafnxpiqvlh3g@awork3.anarazel.de Backpatch-through: v12 Branch ------ REL_15_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/118ec331bfb7c781c03613de22de015229535a3b Modified Files -------------- configure | 9 +++++---- configure.ac | 2 +- src/backend/libpq/be-secure-openssl.c | 14 +++++++++++++- src/include/pg_config.h.in | 3 +++ 4 files changed, 22 insertions(+), 6 deletions(-) ^ permalink raw reply [nested|flat] 7+ messages in thread
* pgsql: Disable all TLS session tickets @ 2024-07-26 09:26 Daniel Gustafsson <dgustafsson@postgresql.org> 0 siblings, 0 replies; 7+ messages in thread From: Daniel Gustafsson @ 2024-07-26 09:26 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Disable all TLS session tickets OpenSSL supports two types of session tickets for TLSv1.3, stateless and stateful. The option we've used only turns off stateless tickets leaving stateful tickets active. Use the new API introduced in 1.1.1 to disable all types of tickets. Backpatch to all supported versions. Reviewed-by: Heikki Linnakangas <hlinnaka@iki.fi> Reported-by: Andres Freund <andres@anarazel.de> Discussion: https://postgr.es/m/20240617173803.6alnafnxpiqvlh3g@awork3.anarazel.de Backpatch-through: v12 Branch ------ REL_14_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/ecbb1cd9b7ec2ef30262708f30397b7d1cdab617 Modified Files -------------- configure | 9 +++++---- configure.ac | 2 +- src/backend/libpq/be-secure-openssl.c | 14 +++++++++++++- src/include/pg_config.h.in | 3 +++ 4 files changed, 22 insertions(+), 6 deletions(-) ^ permalink raw reply [nested|flat] 7+ messages in thread
* pgsql: Disable all TLS session tickets @ 2024-07-26 09:26 Daniel Gustafsson <dgustafsson@postgresql.org> 0 siblings, 0 replies; 7+ messages in thread From: Daniel Gustafsson @ 2024-07-26 09:26 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Disable all TLS session tickets OpenSSL supports two types of session tickets for TLSv1.3, stateless and stateful. The option we've used only turns off stateless tickets leaving stateful tickets active. Use the new API introduced in 1.1.1 to disable all types of tickets. Backpatch to all supported versions. Reviewed-by: Heikki Linnakangas <hlinnaka@iki.fi> Reported-by: Andres Freund <andres@anarazel.de> Discussion: https://postgr.es/m/20240617173803.6alnafnxpiqvlh3g@awork3.anarazel.de Backpatch-through: v12 Branch ------ REL_13_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/1f476bc7537638a6d523651170f4b9848517aa4a Modified Files -------------- configure | 9 +++++---- configure.in | 2 +- src/backend/libpq/be-secure-openssl.c | 14 +++++++++++++- src/include/pg_config.h.in | 3 +++ 4 files changed, 22 insertions(+), 6 deletions(-) ^ permalink raw reply [nested|flat] 7+ messages in thread
* pgsql: Disable all TLS session tickets @ 2024-07-26 09:27 Daniel Gustafsson <dgustafsson@postgresql.org> 0 siblings, 0 replies; 7+ messages in thread From: Daniel Gustafsson @ 2024-07-26 09:27 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Disable all TLS session tickets OpenSSL supports two types of session tickets for TLSv1.3, stateless and stateful. The option we've used only turns off stateless tickets leaving stateful tickets active. Use the new API introduced in 1.1.1 to disable all types of tickets. Backpatch to all supported versions. Reviewed-by: Heikki Linnakangas <hlinnaka@iki.fi> Reported-by: Andres Freund <andres@anarazel.de> Discussion: https://postgr.es/m/20240617173803.6alnafnxpiqvlh3g@awork3.anarazel.de Backpatch-through: v12 Branch ------ REL_12_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/32121c077d69e22ed4686d7ae3a9c637f3a64d85 Modified Files -------------- configure | 9 +++++---- configure.in | 2 +- src/backend/libpq/be-secure-openssl.c | 16 ++++++++++++++-- src/include/pg_config.h.in | 3 +++ 4 files changed, 23 insertions(+), 7 deletions(-) ^ permalink raw reply [nested|flat] 7+ messages in thread
end of thread, other threads:[~2024-07-26 09:27 UTC | newest] Thread overview: 7+ messages (download: mbox mbox.gz follow: Atom feed) -- links below jump to the message on this page -- 2024-07-26 09:19 pgsql: Disable all TLS session tickets Daniel Gustafsson <dgustafsson@postgresql.org> 2024-07-26 09:20 pgsql: Disable all TLS session tickets Daniel Gustafsson <dgustafsson@postgresql.org> 2024-07-26 09:20 pgsql: Disable all TLS session tickets Daniel Gustafsson <dgustafsson@postgresql.org> 2024-07-26 09:21 pgsql: Disable all TLS session tickets Daniel Gustafsson <dgustafsson@postgresql.org> 2024-07-26 09:26 pgsql: Disable all TLS session tickets Daniel Gustafsson <dgustafsson@postgresql.org> 2024-07-26 09:26 pgsql: Disable all TLS session tickets Daniel Gustafsson <dgustafsson@postgresql.org> 2024-07-26 09:27 pgsql: Disable all TLS session tickets Daniel Gustafsson <dgustafsson@postgresql.org>
This inbox is served by DDX for PostgreSQL; see mirroring instructions for how to clone and mirror all data and code used for this inbox