From: Remi Gacogne <remi.gacogne@powerdns.com>
Date: Fri, 15 May 2026 15:02:29 +0000 (+0200)
Subject: dnsdist: Gracefully handle no TLS session tickets allowed
X-Git-Tag: auth-5.1.0~42^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=bd9d46f27bb4c3fe41b2cb0f91a9ca2fcde628c0;p=thirdparty%2Fpdns.git

dnsdist: Gracefully handle no TLS session tickets allowed

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
---

diff --git a/pdns/dnsdistdist/dnsdist-session-cache.cc b/pdns/dnsdistdist/dnsdist-session-cache.cc
index 264bc50ed8..0e2bd39899 100644
--- a/pdns/dnsdistdist/dnsdist-session-cache.cc
+++ b/pdns/dnsdistdist/dnsdist-session-cache.cc
@@ -50,6 +50,10 @@ void TLSSessionCache::putSessions(const boost::uuids::uuid& backendID, time_t no
   }
 
   const auto& runtimeConfig = dnsdist::configuration::getCurrentRuntimeConfiguration();
+  if (runtimeConfig.d_tlsSessionCacheMaxSessionsPerBackend == 0) {
+    return;
+  }
+
   for (auto& session : sessions) {
     auto& entry = data->d_sessions[backendID];
     if (entry.d_sessions.size() >= runtimeConfig.d_tlsSessionCacheMaxSessionsPerBackend) {