]> git.ipfire.org Git - thirdparty/pdns.git/commit
dnsdist: Set the DoH ticket rotation delay before loading tickets 8949/head
authorRemi Gacogne <remi.gacogne@powerdns.com>
Wed, 18 Mar 2020 16:47:49 +0000 (17:47 +0100)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Wed, 18 Mar 2020 16:47:49 +0000 (17:47 +0100)
commit8f6cc1227d521881ddd4f5fb2e4c34dba48441e8
treec54f27ec46fd379712551fdff75f3fb729f32aa5
parent7b4401ff53469abc0e82b55c3d3ff17c8330a4d4
dnsdist: Set the DoH ticket rotation delay before loading tickets

Before that change, we could have loaded DoH STEK from a file without
properly setting the next rotation, causing a ticket rotation to
happen during the first TLS session establishment.
This can be prevented by setting `ticketsKeysRotationDelay=0`.
pdns/dnsdistdist/doh.cc