Fix regression in TLS session ticket disabling
authorDaniel Gustafsson <[email protected]>
Mon, 19 Aug 2024 10:55:11 +0000 (12:55 +0200)
committerDaniel Gustafsson <[email protected]>
Mon, 19 Aug 2024 10:55:11 +0000 (12:55 +0200)
commitf925b7f65d497fae87fad1b419e137a32cfcb504
tree8e0a3d27f2528f3ef1a0daacd6e446dbc18b232c
parent33c615f764c32abf20bf8a5a71fcb44115551867
Fix regression in TLS session ticket disabling

Commit 274bbced disabled session tickets for TLSv1.3 on top of the
already disabled TLSv1.2 session tickets, but accidentally caused
a regression where TLSv1.2 session tickets were incorrectly sent.
Fix by unconditionally disabling TLSv1.2 session tickets and only
disable TLSv1.3 tickets when the right version of OpenSSL is used.

Backpatch to all supported branches.

Reported-by: Cameron Vogt <[email protected]>
Reported-by: Fire Emerald <[email protected]>
Reviewed-by: Jacob Champion <[email protected]>
Discussion: https://postgr.es/m/DM6PR16MB3145CF62857226F350C710D1AB852@DM6PR16MB3145.namprd16.prod.outlook.com
Backpatch-through: v12
src/backend/libpq/be-secure-openssl.c