daemon: client-side & server-side tls session resumption with session tickets (!575) · Merge requests · Knot projects / Knot Resolver · GitLab

GitLab now enforces expiry dates on tokens that originally had no set expiration date. Those tokens were given an expiration date of one year later. Please review your personal access tokens, project access tokens, and group access tokens to ensure you are aware of upcoming expirations. Administrators of GitLab can find more information on how to identify and mitigate interruption in our documentation.

Self sign-up has been disabled due to increased spam activity. If you want to get access, please send an email to a project owner (preferred) or at gitlab(at)nic(dot)cz. We apologize for the inconvenience.

Grigorii Demidov requested to merge tls-client-resumption into master Apr 27, 2018

server-side session resumption support is turned off by default

server-side configuration - net.tls_sticket_salt_string(salt_string)

salt_string - salt string used for session ticket key regeneration

Key regeneration algorithm guarantees that all forked kresd instances will use the same session ticket keys.

session ticket key is regenerated every hour.

Edited May 21, 2018 by Grigorii Demidov