Set jdk.tls.client.enableSessionTicketExtension to false. Fix #5087.

iterate-ch · Jan 12, 2021 · c0efa1f · c0efa1f
1 parent 5435d4a
commit c0efa1f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/core/src/main/java/ch/cyberduck/core/preferences/Preferences.java b/core/src/main/java/ch/cyberduck/core/preferences/Preferences.java
@@ -992,6 +992,10 @@ Integrated Windows Authentication (IWA)
         this.setDefault("connection.ssl.securerandom.algorithm", "NativePRNG");
         this.setDefault("connection.ssl.securerandom.provider", "SUN");
 
+        // If true, the client will send a session ticket extension in the ClientHello for TLS 1.2 and earlier.
+        // Set to false as statless session resumption breaks session reuse in FTPS
+        System.setProperty("jdk.tls.client.enableSessionTicketExtension", String.valueOf(false));
+
         /*
           Transfer read buffer size
          */