aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichael Kaufmann <mail@michael-kaufmann.ch>2017-01-28 20:14:54 +0100
committerMichael Kaufmann <mail@michael-kaufmann.ch>2017-01-28 20:15:30 +0100
commitab08d82648f6deed7e698f1e11b5e3151e8f2f79 (patch)
tree86c674ffaf4585c46662fe259c8293ade080f688
parent511674ab279cebe143748920755631539a198d33 (diff)
mbedtls: disable TLS session tickets
SSL session reuse with TLS session tickets is not supported yet. Use SSL session IDs instead. See https://github.com/curl/curl/issues/1109
-rw-r--r--lib/vtls/mbedtls.c5
1 files changed, 5 insertions, 0 deletions
diff --git a/lib/vtls/mbedtls.c b/lib/vtls/mbedtls.c
index 8bcaddd25..213a58fca 100644
--- a/lib/vtls/mbedtls.c
+++ b/lib/vtls/mbedtls.c
@@ -373,6 +373,11 @@ mbed_connect_step1(struct connectdata *conn,
mbedtls_ssl_conf_ciphersuites(&connssl->config,
mbedtls_ssl_list_ciphersuites());
+#if defined(MBEDTLS_SSL_SESSION_TICKETS)
+ mbedtls_ssl_conf_session_tickets(&connssl->config,
+ MBEDTLS_SSL_SESSION_TICKETS_DISABLED);
+#endif
+
/* Check if there's a cached ID we can/should use here! */
if(data->set.general_ssl.sessionid) {
void *old_session = NULL;