Add patch to disable session tickets on Apache 2.4.10.

ivanr · Jul 22, 2014 · 476d8a1 · 476d8a1
1 parent 6f842ba
commit 476d8a1
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/apache/disable-tickets-2.4.10.patch b/apache/disable-tickets-2.4.10.patch
@@ -0,0 +1,13 @@
+--- ./modules/ssl/ssl_engine_init.c.orig	2014-07-14 05:29:22.000000000 -0700
++++ ./modules/ssl/ssl_engine_init.c	2014-07-21 08:07:17.584482127 -0700
+@@ -583,6 +583,11 @@
+         SSL_CTX_set_mode(ctx, SSL_MODE_RELEASE_BUFFERS);
+ #endif
+
++#ifdef SSL_OP_NO_TICKET
++    /* Disable session tickets. */
++    SSL_CTX_set_options(ctx, SSL_OP_NO_TICKET); 
++#endif
++
+     return APR_SUCCESS;
+ }