Postgres Pro
Downloads
Home   >   mailing lists

Re: TLS session tickets disabled? - Mailing list pgsql-bugs

From Jacob Champion
Subject Re: TLS session tickets disabled?
Date
Msg-id CAOYmi+=o+REWkgJa4URz8Cp_m2xd+g+YPJbk77BrYhNUfynWag@mail.gmail.com
Whole thread Raw
In response to Re: TLS session tickets disabled?  (Cameron Vogt <cvogt@automaticcontrols.net>)
Responses Re: TLS session tickets disabled?
List pgsql-bugs
Tree view 
On Thu, Aug 15, 2024 at 10:36 AM Cameron Vogt
<cvogt@automaticcontrols.net> wrote:
> I don't know enough about TLS handshakes and session tickets to know where the bug truly lies (PostgreSQL/OpenSSL vs
.NET'sSslStream). 

I'm getting the feeling that this is our bug, and that we should be
using both SSL_OP_NO_TICKET (for TLSv1.2) and SSL_CTX_set_num_tickets
(for TLSv1.3). I don't see any indication in the docs or source that
the latter does anything for 1.2.

(cc'ing Daniel)

--Jacob

pgsql-bugs by date:

Previous
From: "Euler Taveira"
Date:
Subject: Re: BUG #18580: The pg_similarity appears to be wrong
Next
From: "David G. Johnston"
Date:
Subject: Re: BUG #18583: jsonb_populate_record return values cannot be queried correctly in subselects