]> git.ipfire.org Git - thirdparty/openvpn.git/commit
configure.ac: check for SSL_OP_NO_TICKET flag in OpenSSL
authorSteffan Karger <steffan@karger.me>
Sun, 23 Mar 2014 13:07:47 +0000 (14:07 +0100)
committerGert Doering <gert@greenie.muc.de>
Sun, 23 Mar 2014 21:22:45 +0000 (22:22 +0100)
commite9b088b20847905ed2c2b85a12be58f457c10d06
tree3f644f3e1a25e1452194efe0dc97fcdb6632d1ee
parentf8c4e88280b060ee8aa77ac5d00133848689694b
configure.ac: check for SSL_OP_NO_TICKET flag in OpenSSL

SSL_OP_NO_TICKET tells OpenSSL to disable "stateless session resumption".
This is something we do not want nor need, but could potentially be used
for a future attack. OpenVPN 2.4 requires the flag to be set and will fail
configure if the flag is not present.
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <CAA1AbxJh17KYmVU1BVa5kp4iJsUJT+xnXp0rVU_3g3c5hPnqDQ@mail.gmail.com>
URL: http://article.gmane.org/gmane.network.openvpn.devel/8389

Signed-off-by: Gert Doering <gert@greenie.muc.de>
configure.ac