From aa422b222735d9f5a30f87d483abe3a7fa6550ca Mon Sep 17 00:00:00 2001 From: Amos Jeffries Date: Wed, 20 Apr 2016 23:56:48 +1200 Subject: [PATCH] Bug 4495: Unknown SSL option SSL_OP_NO_TICKET --- src/cf.data.pre | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/src/cf.data.pre b/src/cf.data.pre index 3bb232379a..adbd006318 100644 --- a/src/cf.data.pre +++ b/src/cf.data.pre @@ -2537,13 +2537,16 @@ DOC_START NO_TLSv1 Disallow the use of TLSv1.0 NO_TLSv1_1 Disallow the use of TLSv1.1 NO_TLSv1_2 Disallow the use of TLSv1.2 + SINGLE_DH_USE Always create a new key when using temporary/ephemeral DH key exchanges - SSL_OP_NO_TICKET + + NO_TICKET Disable use of RFC5077 session tickets. Some servers may have problems understanding the TLS extension due to ambiguous specification in RFC4507. + ALL Enable various bug workarounds suggested as "harmless" by OpenSSL. Be warned that this may reduce SSL/TLS strength to some attacks. @@ -3273,9 +3276,16 @@ DOC_START NO_TLSv1 Disallow the use of TLSv1.0 NO_TLSv1_1 Disallow the use of TLSv1.1 NO_TLSv1_2 Disallow the use of TLSv1.2 + SINGLE_DH_USE Always create a new key when using temporary/ephemeral DH key exchanges + + NO_TICKET + Disable use of RFC5077 session tickets. Some servers + may have problems understanding the TLS extension due + to ambiguous specification in RFC4507. + ALL Enable various bug workarounds suggested as "harmless" by OpenSSL Be warned that this reduces SSL/TLS -- 2.47.2