You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficserver.apache.org by "James Peach (Created) (JIRA)" <ji...@apache.org> on 2012/03/18 05:20:02 UTC

[jira] [Created] (TS-1146) RFC 5077 TLS Session tickets

RFC 5077 TLS Session tickets
----------------------------

                 Key: TS-1146
                 URL: https://issues.apache.org/jira/browse/TS-1146
             Project: Traffic Server
          Issue Type: Improvement
          Components: SSL
            Reporter: James Peach


For supporting RFC 5077 TLS Session tickets across a ATS cluster, all the machines need to have the same server ticket.

See https://github.com/apache/httpd rev 967d943b93498233f0ec81a5b48706fdb6892dfd

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Assigned] (TS-1146) RFC 5077 TLS Session tickets

Posted by "Phil Sorber (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TS-1146?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Phil Sorber reassigned TS-1146:
-------------------------------

    Assignee: Phil Sorber  (was: James Peach)
    
> RFC 5077 TLS Session tickets
> ----------------------------
>
>                 Key: TS-1146
>                 URL: https://issues.apache.org/jira/browse/TS-1146
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: SSL
>            Reporter: James Peach
>            Assignee: Phil Sorber
>             Fix For: 3.3.1
>
>         Attachments: SSL_CTX_set_tlsext_ticket_key_cb.txt
>
>
> For supporting RFC 5077 TLS Session tickets across a ATS cluster, all the machines need to have the same server ticket.
> See https://github.com/apache/httpd rev 967d943b93498233f0ec81a5b48706fdb6892dfd

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Updated] (TS-1146) RFC 5077 TLS Session tickets

Posted by "Leif Hedstrom (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TS-1146?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Leif Hedstrom updated TS-1146:
------------------------------

    Fix Version/s:     (was: 3.1.4)
                   3.3.0

Moving all unassigned bugs out to 3.3.0. Move back and assign as necessary.
                
> RFC 5077 TLS Session tickets
> ----------------------------
>
>                 Key: TS-1146
>                 URL: https://issues.apache.org/jira/browse/TS-1146
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: SSL
>            Reporter: James Peach
>             Fix For: 3.3.0
>
>
> For supporting RFC 5077 TLS Session tickets across a ATS cluster, all the machines need to have the same server ticket.
> See https://github.com/apache/httpd rev 967d943b93498233f0ec81a5b48706fdb6892dfd

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (TS-1146) RFC 5077 TLS Session tickets

Posted by "Leif Hedstrom (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TS-1146?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Leif Hedstrom updated TS-1146:
------------------------------

    Fix Version/s: 3.1.4
    
> RFC 5077 TLS Session tickets
> ----------------------------
>
>                 Key: TS-1146
>                 URL: https://issues.apache.org/jira/browse/TS-1146
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: SSL
>            Reporter: James Peach
>             Fix For: 3.1.4
>
>
> For supporting RFC 5077 TLS Session tickets across a ATS cluster, all the machines need to have the same server ticket.
> See https://github.com/apache/httpd rev 967d943b93498233f0ec81a5b48706fdb6892dfd

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (TS-1146) RFC 5077 TLS Session tickets

Posted by "James Peach (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/TS-1146?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13458415#comment-13458415 ] 

James Peach commented on TS-1146:
---------------------------------

also http://vincent.bernat.im/en/blog/2011-ssl-session-reuse-rfc5077.html
                
> RFC 5077 TLS Session tickets
> ----------------------------
>
>                 Key: TS-1146
>                 URL: https://issues.apache.org/jira/browse/TS-1146
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: SSL
>            Reporter: James Peach
>            Assignee: James Peach
>             Fix For: 3.3.1
>
>
> For supporting RFC 5077 TLS Session tickets across a ATS cluster, all the machines need to have the same server ticket.
> See https://github.com/apache/httpd rev 967d943b93498233f0ec81a5b48706fdb6892dfd

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Updated] (TS-1146) RFC 5077 TLS Session tickets

Posted by "James Peach (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TS-1146?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

James Peach updated TS-1146:
----------------------------

    Attachment: SSL_CTX_set_tlsext_ticket_key_cb.txt

Looks like there is a documentation patch to OpenSSL for this API, see <http://www.mail-archive.com/openssl-dev@openssl.org/msg30246/SSL_CTX_set_tlsext_ticket_key_cb.pod>.

Attaching a copy in case the above link stops working.
                
> RFC 5077 TLS Session tickets
> ----------------------------
>
>                 Key: TS-1146
>                 URL: https://issues.apache.org/jira/browse/TS-1146
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: SSL
>            Reporter: James Peach
>            Assignee: James Peach
>             Fix For: 3.3.1
>
>         Attachments: SSL_CTX_set_tlsext_ticket_key_cb.txt
>
>
> For supporting RFC 5077 TLS Session tickets across a ATS cluster, all the machines need to have the same server ticket.
> See https://github.com/apache/httpd rev 967d943b93498233f0ec81a5b48706fdb6892dfd

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Commented] (TS-1146) RFC 5077 TLS Session tickets

Posted by "James Peach (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/TS-1146?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13232154#comment-13232154 ] 

James Peach commented on TS-1146:
---------------------------------

Also:
    https://github.com/apache/httpd/commit/414911a5da0910b23aa00872874cf64b6b8a7b6b
    
                
> RFC 5077 TLS Session tickets
> ----------------------------
>
>                 Key: TS-1146
>                 URL: https://issues.apache.org/jira/browse/TS-1146
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: SSL
>            Reporter: James Peach
>
> For supporting RFC 5077 TLS Session tickets across a ATS cluster, all the machines need to have the same server ticket.
> See https://github.com/apache/httpd rev 967d943b93498233f0ec81a5b48706fdb6892dfd

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Assigned] (TS-1146) RFC 5077 TLS Session tickets

Posted by "James Peach (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TS-1146?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

James Peach reassigned TS-1146:
-------------------------------

    Assignee: James Peach
    
> RFC 5077 TLS Session tickets
> ----------------------------
>
>                 Key: TS-1146
>                 URL: https://issues.apache.org/jira/browse/TS-1146
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: SSL
>            Reporter: James Peach
>            Assignee: James Peach
>             Fix For: 3.3.0
>
>
> For supporting RFC 5077 TLS Session tickets across a ATS cluster, all the machines need to have the same server ticket.
> See https://github.com/apache/httpd rev 967d943b93498233f0ec81a5b48706fdb6892dfd

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (TS-1146) RFC 5077 TLS Session tickets

Posted by "Leif Hedstrom (Commented) (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/TS-1146?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13232150#comment-13232150 ] 

Leif Hedstrom commented on TS-1146:
-----------------------------------

https://github.com/apache/httpd/commit/967d943b93498233f0ec81a5b48706fdb6892dfd
                
> RFC 5077 TLS Session tickets
> ----------------------------
>
>                 Key: TS-1146
>                 URL: https://issues.apache.org/jira/browse/TS-1146
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: SSL
>            Reporter: James Peach
>
> For supporting RFC 5077 TLS Session tickets across a ATS cluster, all the machines need to have the same server ticket.
> See https://github.com/apache/httpd rev 967d943b93498233f0ec81a5b48706fdb6892dfd

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira