Changeset 8d0efdc in mod_gnutls for test/tests/37_TLS_reverse_proxy_resume_session

Timestamp:

Jun 18, 2020, 4:57:32 PM (3 years ago)

Author:

Fiona Klute <fiona.klute@…>

Branches:

asyncio, main, master

Children:

9a26df9

Parents:

8f000b7

Message:

Disable session tickets by default

After learning that the GnuTLS key "rotation" scheme never actually
changes the primary key I'm disabling session tickets by default,
because I cannot ensure everyone will reload their servers to replace
the keys. I hope to eventually implement a real key rotation and
enable tickets by default again.

File:

• test/tests/37_TLS_reverse_proxy_resume_session/backend.conf (modified) (1 diff)

test/tests/37_TLS_reverse_proxy_resume_session/backend.conf

@@ -1 +1 @@
 Include ${PWD}/proxy_backend.conf
+GnuTLSSessionTickets on
 
 <VirtualHost _default_:${BACKEND_PORT}>