You are viewing a plain text version of this content. The canonical link for it is here.
Posted to github@trafficserver.apache.org by "bryancall (via GitHub)" <gi...@apache.org> on 2023/09/07 20:36:47 UTC
[GitHub] [trafficserver] bryancall opened a new pull request, #10385: Allow origins to do TLS renegotiation
bryancall opened a new pull request, #10385:
URL: https://github.com/apache/trafficserver/pull/10385
Ran into an issue where IIS will do a TLS renegotiation after the first request is made. Since the handshake has already been completed it is failing this check.
CI has a test for TS_SSL_VERIFY_SERVER_HOOK and I will see if this change breaks that functionality.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@trafficserver.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficserver] bryancall merged pull request #10385: Allow origins to do TLS renegotiation
Posted by "bryancall (via GitHub)" <gi...@apache.org>.
bryancall merged PR #10385:
URL: https://github.com/apache/trafficserver/pull/10385
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@trafficserver.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficserver] shinrich commented on pull request #10385: Allow origins to do TLS renegotiation
Posted by "shinrich (via GitHub)" <gi...@apache.org>.
shinrich commented on PR #10385:
URL: https://github.com/apache/trafficserver/pull/10385#issuecomment-1712176372
Logic seems reasonable. Do we want to make this configurable? I dimly recall that renegotiation is frowned up these days. If it is configurable, I assume that is something we can set during the TLS negotiation to indicate whether the client will handle renegotiations.
Oh I see the 10 year old article you reference does discuss some of the renegotiation concerns.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@trafficserver.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficserver] bryancall commented on pull request #10385: Allow origins to do TLS renegotiation
Posted by "bryancall (via GitHub)" <gi...@apache.org>.
bryancall commented on PR #10385:
URL: https://github.com/apache/trafficserver/pull/10385#issuecomment-1711860742
This commit has the logic change: https://github.com/apache/trafficserver/pull/10385/commits/ede1f34e6260551726bc9e466c886278d305980c the rest of the PR is just cleanup.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@trafficserver.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org