Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

tlscontext: set the ssl session id context to a static value #2000

Merged
merged 1 commit into from
Apr 24, 2018

Conversation

bazsi
Copy link
Collaborator

@bazsi bazsi commented Apr 21, 2018

When using OpenSSL 1.1, and clients supporting SSL session resumption, we
need to set the SSL session ID context, otherwise Windows clients with client
certificate will fail to connect for the 2nd time.

Very helpful PostgreSQL thread:
https://www.postgresql.org/message-id/CADT4RqBU8N-csyZuzaook-c795dt22Zcwg1aHWB6tfVdAkodZA%40mail.gmail.com

Original bugreport:
#1936

Should fix #1936

Signed-off-by: Balazs Scheidler balazs.scheidler@balabit.com

@kira-syslogng
Copy link
Contributor

success

@furiel
Copy link
Collaborator

furiel commented Apr 21, 2018

2000th pull request :)
(insert champagne gif here)

When using OpenSSL 1.1, and clients supporting SSL session resumption, we
need to set the SSL session ID context, otherwise Windows clients with client
certificate will fail to connect for the 2nd time.

Very helpful PostgreSQL thread:
https://www.postgresql.org/message-id/CADT4RqBU8N-csyZuzaook-c795dt22Zcwg1aHWB6tfVdAkodZA%40mail.gmail.com

Original bugreport:
#1936

Should fix #1936

Signed-off-by: Balazs Scheidler <balazs.scheidler@balabit.com>
@bazsi
Copy link
Collaborator Author

bazsi commented Apr 21, 2018 via email

@kira-syslogng
Copy link
Contributor

success

@lbudai lbudai merged commit eba4ff0 into master Apr 24, 2018
@MrAnno MrAnno mentioned this pull request Apr 24, 2018
@MrAnno MrAnno deleted the ssl-session-id-context branch May 6, 2018 17:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

SSL "session id context uninitialized" sending logs from Windows with client certs
4 participants