Hi Nenad,
> Olivier Doucet reported the issue on the ML and tested that when using
> more than TLS_TICKETS_NO keys in the file, the CPU usage is much higeher
> than expected.
>
> Lukas Tribus then provided a test case which showed that resumption doesn't
> work at all in that case.
The patch fixes the issue for me.
But I have seen another behavior which does not really match my
expectation, we are saying:
Last TLS_TICKETS_NO keys will be used for decryption
But my tests with Vincents rfc5077-client indicate that we use all
available keys in the file for decryption, not only TLS_TICKETS_NO.
Now, I don't have a strong opinion against this behavior, but it
doesn't look like this is the behavior we would expect.
Do you see a reason for this in the code?
Thanks,
Lukas