On 4/3/26 1:58 AM, Mykola Yurchenko via dev wrote:
> OVS currently does not support TLS session resumption. The server side
> 
> session cache is disabled (SSL_SESS_CACHE_OFF) and no session id
> context is configured. However, clients may still send stateless
> tickets, causing SSL_accept() to fail with "session id context
> uninitialized".
> 
> Disable stateless session tickets with SSL_OP_NO_TICKET so that
> clients do not attempt resumption.
> 
> Signed-off-by: Mykola Yurchenko <[email protected]>
> ---
> 
> Version 2:
>   - Use SSL_OP_NO_TICKET instead of SSL_CTX_set_session_id_context()
>     to avoid enabling session resumption.  [Ilya Maximets]
Thanks!  I fixed the missing period at the end of the subject and
the strange empty line in the commit message and applied the change.

Also, it's kind of a bug fix, so backported down to 3.3.

Best regards, Ilya Maximets.
_______________________________________________
dev mailing list
[email protected]
https://mail.openvswitch.org/mailman/listinfo/ovs-dev

Reply via email to