Fix regression in TLS session ticket disabling
authorDaniel Gustafsson <dgustafsson@postgresql.org>
Mon, 19 Aug 2024 10:55:11 +0000 (12:55 +0200)
committerDaniel Gustafsson <dgustafsson@postgresql.org>
Mon, 19 Aug 2024 10:55:11 +0000 (12:55 +0200)
commit23c200940eae6e7d9cf5712c3514691bfdaf3904
treecfabd22b80fc169486c5f9e642ceef33d1e282c9
parentc1bb534bae431f4bbc50abf471507457e1b24efc
Fix regression in TLS session ticket disabling

Commit 274bbced disabled session tickets for TLSv1.3 on top of the
already disabled TLSv1.2 session tickets, but accidentally caused
a regression where TLSv1.2 session tickets were incorrectly sent.
Fix by unconditionally disabling TLSv1.2 session tickets and only
disable TLSv1.3 tickets when the right version of OpenSSL is used.

Backpatch to all supported branches.

Reported-by: Cameron Vogt <cvogt@automaticcontrols.net>
Reported-by: Fire Emerald <fire.github@gmail.com>
Reviewed-by: Jacob Champion <jacob.champion@enterprisedb.com>
Discussion: https://postgr.es/m/DM6PR16MB3145CF62857226F350C710D1AB852@DM6PR16MB3145.namprd16.prod.outlook.com
Backpatch-through: v12
src/backend/libpq/be-secure-openssl.c