Re: relayd TLS ticket and session support accross processes

2016-09-01 Thread Reyk Floeter
On Thu, Sep 01, 2016 at 11:27:55AM +0200, Claudio Jeker wrote: > On Tue, Aug 30, 2016 at 03:51:04PM +0200, Claudio Jeker wrote: > > On Tue, Aug 30, 2016 at 02:44:17PM +0200, Reyk Floeter wrote: > > > On Tue, Aug 30, 2016 at 01:22:49PM +0200, Claudio Jeker wrote: > > > > Here is the latest version

Re: relayd TLS ticket and session support accross processes

2016-09-01 Thread Claudio Jeker
On Tue, Aug 30, 2016 at 03:51:04PM +0200, Claudio Jeker wrote: > On Tue, Aug 30, 2016 at 02:44:17PM +0200, Reyk Floeter wrote: > > On Tue, Aug 30, 2016 at 01:22:49PM +0200, Claudio Jeker wrote: > > > Here is the latest version of the ticket and tls session cache support. > > > Tickets can be

Re: relayd TLS ticket and session support accross processes

2016-08-30 Thread Bob Beck
Quite Frankly, we're happy to support what's needed in relayd, But first relayd needs to actually convert to use libtls instead of bare knuckles shit Until then we're just making the problem worse. IMO, we should convert relayd to use libtls - (add what we need to libtls to support it) before

Re: relayd TLS ticket and session support accross processes

2016-08-30 Thread Claudio Jeker
On Tue, Aug 30, 2016 at 02:44:17PM +0200, Reyk Floeter wrote: > On Tue, Aug 30, 2016 at 01:22:49PM +0200, Claudio Jeker wrote: > > Here is the latest version of the ticket and tls session cache support. > > Tickets can be disabled and also the session timeout is configurable. > > Same code as

Re: relayd TLS ticket and session support accross processes

2016-08-30 Thread Reyk Floeter
On Tue, Aug 30, 2016 at 01:22:49PM +0200, Claudio Jeker wrote: > Here is the latest version of the ticket and tls session cache support. > Tickets can be disabled and also the session timeout is configurable. > Same code as before with man page diff > Nice work! I'm curious how this impact

relayd TLS ticket and session support accross processes

2016-08-30 Thread Claudio Jeker
Here is the latest version of the ticket and tls session cache support. Tickets can be disabled and also the session timeout is configurable. Same code as before with man page diff Will commit this soonish unless somebody complains -- :wq Claudio Index: Makefile