[TS-3371] Should create a global session ticket disable

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 7.0.0
• Component/s: SSL
• Assignee: Syeda Persia Aziz
• Reporter: Susan Hinrichs
• Created: 06/Feb/15 14:28
• Updated: 07/Nov/16 23:26
• Resolved: 16/Jul/16 15:19

Description

The current implementation requires the ATS to set the ssl_ticket_enabled=0 for every entry in ssl_multicert.config to turn off the ssl ticket session support.

It would be better to have a global switch. It seems highly unlikely that someone will want to deploy ssl tickets for some destinations but not others.

Would also be good to have a switch to disable ATS from offering session tickets when communicating with origin servers.

Issue Links

• incorporates: TS-4263 Session tickets keys in ssl_multicert.config do not work with SNI discovered hosts
• is related to: TS-3742 ATS advertises TLS ticket extension even when disabled
• is related to: TS-2773 Rewrite SSL certificate configuration
• relates to: TS-3528 Create a global for the ticket_key_name from ssl_multicert.config
• links to: GitHub Pull Request #750
• links to: GitHub Pull Request #758