TLS resumption: disable on continued-connection
authorJeremy Harris <jgh146exb@wizmail.org>
Mon, 23 May 2022 11:09:43 +0000 (12:09 +0100)
committerJeremy Harris <jgh146exb@wizmail.org>
Mon, 23 May 2022 13:17:35 +0000 (14:17 +0100)
commitc065180cc7302a6d0ef7db9272ead690a3f97c01
treee97a814f1138705ca15fd236b1db75b7671f9219
parent571207f1c21781059cec32aefd0da4f3f70081f7
TLS resumption: disable on continued-connection

When we have an open TCP connection and are start a second TLS session
we do not have the host-lbserver string (being in a freshly exec'd
process) needed for session-cache lookup, so resumptino is not safe.
src/src/tls-gnu.c
src/src/tls-openssl.c
src/src/transports/smtp.c