diff options
| author | Stefan Eissing <stefan@eissing.org> | 2024-12-18 13:22:35 +0100 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2024-12-20 14:59:23 +0100 |
| commit | fa0ccd9f1fbbbd77bf50b26e3ba231ea6c729474 (patch) | |
| tree | 3d7977ec23afde7933d1fd4bac9b1044a33c7f76 /docs/examples/xmlstream.c | |
| parent | e5e2e09a75def01f7c103d11d36fb34cbaf464dd (diff) | |
lib: TLS session ticket caching reworked
Described in detail in internal doc TLS-SESSIONS.md
Main points:
- use a new `ssl_peer_key` for cache lookups by connection filters
- recognize differences between TLSv1.3 and other tickets
* TLSv1.3 tickets are single-use, cache can hold several of them for a peer
* TLSv1.2 are reused, keep only a single one per peer
- differentiate between ticket BLOB to store (that could be persisted) and object instances
- use put/take/return pattern for cache access
- remember TLS version, ALPN protocol, time received and lifetime of ticket
- auto-expire tickets after their lifetime
Closes #15774
Diffstat (limited to 'docs/examples/xmlstream.c')
0 files changed, 0 insertions, 0 deletions