diff options
| author | Daniel Gustafsson | 2024-07-26 09:09:45 +0000 |
|---|---|---|
| committer | Daniel Gustafsson | 2024-07-26 09:09:45 +0000 |
| commit | 274bbced85383e831ddeb9d83a8af74c4992e7a1 (patch) | |
| tree | 7b7a04600b2860482263a6fd140f38963fdb4b6a /src/include | |
| parent | 6f9a62b454e8d36f57d54efa141c464f69ce9206 (diff) | |
Disable all TLS session tickets
OpenSSL supports two types of session tickets for TLSv1.3, stateless
and stateful. The option we've used only turns off stateless tickets
leaving stateful tickets active. Use the new API introduced in 1.1.1
to disable all types of tickets.
Backpatch to all supported versions.
Reviewed-by: Heikki Linnakangas <hlinnaka@iki.fi>
Reported-by: Andres Freund <andres@anarazel.de>
Discussion: https://postgr.es/m/20240617173803.6alnafnxpiqvlh3g@awork3.anarazel.de
Backpatch-through: v12
Diffstat (limited to 'src/include')
| -rw-r--r-- | src/include/pg_config.h.in | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/include/pg_config.h.in b/src/include/pg_config.h.in index 9862739b8e8..db3fcbecc3a 100644 --- a/src/include/pg_config.h.in +++ b/src/include/pg_config.h.in @@ -517,6 +517,9 @@ /* Define to 1 if you have the `X509_get_signature_info' function. */ #undef HAVE_X509_GET_SIGNATURE_INFO +/* Define to 1 if you have the `SSL_CTX_set_num_tickets' function. */ +#undef HAVE_SSL_CTX_SET_NUM_TICKETS + /* Define to 1 if the assembler supports X86_64's POPCNTQ instruction. */ #undef HAVE_X86_64_POPCNTQ |