Hi Nenad,

> Olivier Doucet reported the issue on the ML and tested that when using
> more than TLS_TICKETS_NO keys in the file, the CPU usage is much higeher
> than expected.
>
> Lukas Tribus then provided a test case which showed that resumption doesn't
> work at all in that case.

The patch fixes the issue for me.


But I have seen another behavior which does not really match my
expectation, we are saying:

Last TLS_TICKETS_NO keys will be used for decryption


But my tests with Vincents rfc5077-client indicate that we use all
available keys in the file for decryption, not only TLS_TICKETS_NO.


Now, I don't have a strong opinion against this behavior, but it
doesn't look like this is the behavior we would expect.


Do you see a reason for this in the code?


Thanks,

Lukas
                                          

Reply via email to