pike.git/ lib/ modules/ SSL.pmod/ Connection.pike

2016-07-13

2016-07-13 12:18:00 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• 372b2a05d05fa0d0e052e6634d2acf8d03629ed4 (3 lines) (+3/-0) ^{[ Show | Annotate ]}
  Branch: 8.1

SSL.ServerConnection: Session tickets (RFC 4507 and RFC 5077).

Server side support for session tickets.

Note that the default ticket encoding is to use the session_id,
it thus uses server side state. The ticket encoding can be changed
by overriding {en,de}code_ticket() in SSL.Context.

Implementation verified against OpenSSL's s_client.

79:   private constant Packet = .Packet;   private constant Alert = .Alert;    + int(0..3) tickets_enabled = 0; +    // RFC 7301 (ALPN) 3.1:   // Unlike many other TLS extensions, this extension does not establish   // properties of the session, only of the connection. When session