pg.ddx.io pgsql-committers@postgresql.org mailing list archivehelp / color / mirror / Atom feed
pgsql: Fix regression in TLS session ticket disabling 7+ messages / 1 participants [nested] [flat]
* pgsql: Fix regression in TLS session ticket disabling @ 2024-08-19 11:12 Daniel Gustafsson <dgustafsson@postgresql.org> 0 siblings, 0 replies; 7+ messages in thread From: Daniel Gustafsson @ 2024-08-19 11:12 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Fix regression in TLS session ticket disabling Commit 274bbced disabled session tickets for TLSv1.3 on top of the already disabled TLSv1.2 session tickets, but accidentally caused a regression where TLSv1.2 session tickets were incorrectly sent. Fix by unconditionally disabling TLSv1.2 session tickets and only disable TLSv1.3 tickets when the right version of OpenSSL is used. Backpatch to all supported branches. Reported-by: Cameron Vogt <cvogt@automaticcontrols.net> Reported-by: Fire Emerald <fire.github@gmail.com> Reviewed-by: Jacob Champion <jacob.champion@enterprisedb.com> Discussion: https://postgr.es/m/DM6PR16MB3145CF62857226F350C710D1AB852@DM6PR16MB3145.namprd16.prod.outlook.com Backpatch-through: v12 Branch ------ master Details ------- https://git.postgresql.org/pg/commitdiff/4fdb6558c2709c799643d26f3f956395ae72a8ef Modified Files -------------- src/backend/libpq/be-secure-openssl.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) ^ permalink raw reply [nested|flat] 7+ messages in thread
* pgsql: Fix regression in TLS session ticket disabling @ 2024-08-19 11:27 Daniel Gustafsson <dgustafsson@postgresql.org> 0 siblings, 0 replies; 7+ messages in thread From: Daniel Gustafsson @ 2024-08-19 11:27 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Fix regression in TLS session ticket disabling Commit 274bbced disabled session tickets for TLSv1.3 on top of the already disabled TLSv1.2 session tickets, but accidentally caused a regression where TLSv1.2 session tickets were incorrectly sent. Fix by unconditionally disabling TLSv1.2 session tickets and only disable TLSv1.3 tickets when the right version of OpenSSL is used. Backpatch to all supported branches. Reported-by: Cameron Vogt <cvogt@automaticcontrols.net> Reported-by: Fire Emerald <fire.github@gmail.com> Reviewed-by: Jacob Champion <jacob.champion@enterprisedb.com> Discussion: https://postgr.es/m/DM6PR16MB3145CF62857226F350C710D1AB852@DM6PR16MB3145.namprd16.prod.outlook.com Backpatch-through: v12 Branch ------ REL_17_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/19021d28cdf0e84ebc498382826b936df62f5dba Modified Files -------------- src/backend/libpq/be-secure-openssl.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) ^ permalink raw reply [nested|flat] 7+ messages in thread
* pgsql: Fix regression in TLS session ticket disabling @ 2024-08-19 11:28 Daniel Gustafsson <dgustafsson@postgresql.org> 0 siblings, 0 replies; 7+ messages in thread From: Daniel Gustafsson @ 2024-08-19 11:28 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Fix regression in TLS session ticket disabling Commit 274bbced disabled session tickets for TLSv1.3 on top of the already disabled TLSv1.2 session tickets, but accidentally caused a regression where TLSv1.2 session tickets were incorrectly sent. Fix by unconditionally disabling TLSv1.2 session tickets and only disable TLSv1.3 tickets when the right version of OpenSSL is used. Backpatch to all supported branches. Reported-by: Cameron Vogt <cvogt@automaticcontrols.net> Reported-by: Fire Emerald <fire.github@gmail.com> Reviewed-by: Jacob Champion <jacob.champion@enterprisedb.com> Discussion: https://postgr.es/m/DM6PR16MB3145CF62857226F350C710D1AB852@DM6PR16MB3145.namprd16.prod.outlook.com Backpatch-through: v12 Branch ------ REL_16_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/9333174af47560677b62ae5025e4414f860a84a7 Modified Files -------------- src/backend/libpq/be-secure-openssl.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) ^ permalink raw reply [nested|flat] 7+ messages in thread
* pgsql: Fix regression in TLS session ticket disabling @ 2024-08-19 11:28 Daniel Gustafsson <dgustafsson@postgresql.org> 0 siblings, 0 replies; 7+ messages in thread From: Daniel Gustafsson @ 2024-08-19 11:28 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Fix regression in TLS session ticket disabling Commit 274bbced disabled session tickets for TLSv1.3 on top of the already disabled TLSv1.2 session tickets, but accidentally caused a regression where TLSv1.2 session tickets were incorrectly sent. Fix by unconditionally disabling TLSv1.2 session tickets and only disable TLSv1.3 tickets when the right version of OpenSSL is used. Backpatch to all supported branches. Reported-by: Cameron Vogt <cvogt@automaticcontrols.net> Reported-by: Fire Emerald <fire.github@gmail.com> Reviewed-by: Jacob Champion <jacob.champion@enterprisedb.com> Discussion: https://postgr.es/m/DM6PR16MB3145CF62857226F350C710D1AB852@DM6PR16MB3145.namprd16.prod.outlook.com Backpatch-through: v12 Branch ------ REL_15_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/23c200940eae6e7d9cf5712c3514691bfdaf3904 Modified Files -------------- src/backend/libpq/be-secure-openssl.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) ^ permalink raw reply [nested|flat] 7+ messages in thread
* pgsql: Fix regression in TLS session ticket disabling @ 2024-08-19 11:28 Daniel Gustafsson <dgustafsson@postgresql.org> 0 siblings, 0 replies; 7+ messages in thread From: Daniel Gustafsson @ 2024-08-19 11:28 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Fix regression in TLS session ticket disabling Commit 274bbced disabled session tickets for TLSv1.3 on top of the already disabled TLSv1.2 session tickets, but accidentally caused a regression where TLSv1.2 session tickets were incorrectly sent. Fix by unconditionally disabling TLSv1.2 session tickets and only disable TLSv1.3 tickets when the right version of OpenSSL is used. Backpatch to all supported branches. Reported-by: Cameron Vogt <cvogt@automaticcontrols.net> Reported-by: Fire Emerald <fire.github@gmail.com> Reviewed-by: Jacob Champion <jacob.champion@enterprisedb.com> Discussion: https://postgr.es/m/DM6PR16MB3145CF62857226F350C710D1AB852@DM6PR16MB3145.namprd16.prod.outlook.com Backpatch-through: v12 Branch ------ REL_14_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/8cea8c023edfc8ab8eadd4e68a9686727f494aaf Modified Files -------------- src/backend/libpq/be-secure-openssl.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) ^ permalink raw reply [nested|flat] 7+ messages in thread
* pgsql: Fix regression in TLS session ticket disabling @ 2024-08-19 11:29 Daniel Gustafsson <dgustafsson@postgresql.org> 0 siblings, 0 replies; 7+ messages in thread From: Daniel Gustafsson @ 2024-08-19 11:29 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Fix regression in TLS session ticket disabling Commit 274bbced disabled session tickets for TLSv1.3 on top of the already disabled TLSv1.2 session tickets, but accidentally caused a regression where TLSv1.2 session tickets were incorrectly sent. Fix by unconditionally disabling TLSv1.2 session tickets and only disable TLSv1.3 tickets when the right version of OpenSSL is used. Backpatch to all supported branches. Reported-by: Cameron Vogt <cvogt@automaticcontrols.net> Reported-by: Fire Emerald <fire.github@gmail.com> Reviewed-by: Jacob Champion <jacob.champion@enterprisedb.com> Discussion: https://postgr.es/m/DM6PR16MB3145CF62857226F350C710D1AB852@DM6PR16MB3145.namprd16.prod.outlook.com Backpatch-through: v12 Branch ------ REL_13_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/f925b7f65d497fae87fad1b419e137a32cfcb504 Modified Files -------------- src/backend/libpq/be-secure-openssl.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) ^ permalink raw reply [nested|flat] 7+ messages in thread
* pgsql: Fix regression in TLS session ticket disabling @ 2024-08-19 11:29 Daniel Gustafsson <dgustafsson@postgresql.org> 0 siblings, 0 replies; 7+ messages in thread From: Daniel Gustafsson @ 2024-08-19 11:29 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Fix regression in TLS session ticket disabling Commit 274bbced disabled session tickets for TLSv1.3 on top of the already disabled TLSv1.2 session tickets, but accidentally caused a regression where TLSv1.2 session tickets were incorrectly sent. Fix by unconditionally disabling TLSv1.2 session tickets and only disable TLSv1.3 tickets when the right version of OpenSSL is used. Backpatch to all supported branches. Reported-by: Cameron Vogt <cvogt@automaticcontrols.net> Reported-by: Fire Emerald <fire.github@gmail.com> Reviewed-by: Jacob Champion <jacob.champion@enterprisedb.com> Discussion: https://postgr.es/m/DM6PR16MB3145CF62857226F350C710D1AB852@DM6PR16MB3145.namprd16.prod.outlook.com Backpatch-through: v12 Branch ------ REL_12_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/cd98a142cb37fbef82b94a88cd72ed936854991c Modified Files -------------- src/backend/libpq/be-secure-openssl.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) ^ permalink raw reply [nested|flat] 7+ messages in thread
end of thread, other threads:[~2024-08-19 11:29 UTC | newest] Thread overview: 7+ messages (download: mbox mbox.gz follow: Atom feed) -- links below jump to the message on this page -- 2024-08-19 11:12 pgsql: Fix regression in TLS session ticket disabling Daniel Gustafsson <dgustafsson@postgresql.org> 2024-08-19 11:27 pgsql: Fix regression in TLS session ticket disabling Daniel Gustafsson <dgustafsson@postgresql.org> 2024-08-19 11:28 pgsql: Fix regression in TLS session ticket disabling Daniel Gustafsson <dgustafsson@postgresql.org> 2024-08-19 11:28 pgsql: Fix regression in TLS session ticket disabling Daniel Gustafsson <dgustafsson@postgresql.org> 2024-08-19 11:28 pgsql: Fix regression in TLS session ticket disabling Daniel Gustafsson <dgustafsson@postgresql.org> 2024-08-19 11:29 pgsql: Fix regression in TLS session ticket disabling Daniel Gustafsson <dgustafsson@postgresql.org> 2024-08-19 11:29 pgsql: Fix regression in TLS session ticket disabling Daniel Gustafsson <dgustafsson@postgresql.org>
This inbox is served by DDX for PostgreSQL; see mirroring instructions for how to clone and mirror all data and code used for this inbox