Changeset ae233c2 in mod_gnutls

Timestamp:

Jun 30, 2010, 9:09:56 PM (13 years ago)

Author:

Nikos Mavrogiannopoulos <nmav@…>

Branches:

asyncio, debian/master, debian/stretch-backports, jessie-backports, main, master, msva, proxy-ticket, upstream

Children:

bca274d

Parents:

7b3e5de

Message:

Added option to turn on/off session tickets.

Files:

• NEWS (modified) (1 diff)
• include/mod_gnutls.h.in (modified) (2 diffs)
• src/gnutls_config.c (modified) (1 diff)
• src/gnutls_hooks.c (modified) (1 diff)
• src/mod_gnutls.c (modified) (1 diff)

NEWS

@@ -9 +9 @@
   server to avoid using a session cache and still support
   session resumption. This is at the cost of transporting
-  session data during handshake.
+  session data during handshake. New option
+  GnuTLSSessionTickets [on|off]
 
 - Depend on gnutls 2.10.0 to force support for safe

include/mod_gnutls.h.in

@@ -110 +110 @@
     int client_verify_mode;
     apr_time_t last_cache_check;
+    int tickets; /* whether session tickets are allowed */
 } mgs_srvconf_rec;
 
@@ -281 +282 @@
 const char *mgs_set_priorities(cmd_parms * parms, void *dummy,
                             const char *arg);
+const char *mgs_set_tickets(cmd_parms * parms, void *dummy,
+                            const char *arg);
                             
 const char *mgs_set_require_section(cmd_parms *cmd, 

src/gnutls_config.c

@@ -286 +286 @@
 }
 
+const char *mgs_set_tickets(cmd_parms * parms, void *dummy,
+                                     const char *arg)
+{
+    mgs_srvconf_rec *sc =
+        (mgs_srvconf_rec *) ap_get_module_config(parms->server->
+                                                 module_config,
+                                                 &gnutls_module);
+
+    sc->tickets = 0;
+    if (strcasecmp("on", arg) == 0) {
+        sc->tickets = 1;
+    }
+
+    return NULL;
+}
+
 
 #ifdef ENABLE_SRP

src/gnutls_hooks.c

@@ -674 +674 @@
 
     gnutls_init(&ctxt->session, GNUTLS_SERVER);
-    if (session_ticket_key.data != NULL)
+    if (session_ticket_key.data != NULL && ctxt->sc->tickets != 0)
         gnutls_session_ticket_enable_server(ctxt->session, &session_ticket_key);
 

src/mod_gnutls.c

@@ -122 +122 @@
                   RSRC_CONF,
                   "Cache Configuration"),
+    AP_INIT_TAKE1("GnuTLSSessionTickets", mgs_set_tickets,
+                  NULL,
+                  RSRC_CONF,
+                  "Session Tickets Configuration"),
     AP_INIT_RAW_ARGS("GnuTLSPriorities", mgs_set_priorities,
                   NULL,