diff options
| author | Steffan Karger | 2014-03-23 14:07:47 +0100 |
|---|---|---|
| committer | Gert Doering | 2014-03-23 22:22:45 +0100 |
| commit | e9b088b20847905ed2c2b85a12be58f457c10d06 (patch) | |
| tree | 3f644f3e1a25e1452194efe0dc97fcdb6632d1ee /src/openvpn/socket.h | |
| parent | f8c4e88280b060ee8aa77ac5d00133848689694b (diff) | |
| download | openvpn-e9b088b20847905ed2c2b85a12be58f457c10d06.zip openvpn-e9b088b20847905ed2c2b85a12be58f457c10d06.tar.gz | |
configure.ac: check for SSL_OP_NO_TICKET flag in OpenSSL
SSL_OP_NO_TICKET tells OpenSSL to disable "stateless session resumption".
This is something we do not want nor need, but could potentially be used
for a future attack. OpenVPN 2.4 requires the flag to be set and will fail
configure if the flag is not present.
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <CAA1AbxJh17KYmVU1BVa5kp4iJsUJT+xnXp0rVU_3g3c5hPnqDQ@mail.gmail.com>
URL: http://article.gmane.org/gmane.network.openvpn.devel/8389
Signed-off-by: Gert Doering <gert@greenie.muc.de>
Diffstat (limited to 'src/openvpn/socket.h')
0 files changed, 0 insertions, 0 deletions