bind9/lib
Artem Boldariev 40be3c9263 Do not provide a shim for SSL_SESSION_is_resumable()
The recently added TLS client session cache used
SSL_SESSION_is_resumable() to avoid polluting the cache with
non-resumable sessions. However, it turned out that we cannot provide
a shim for this function across the whole range of OpenSSL versions
due to the fact that OpenSSL 1.1.0 does uses opaque pointers for
SSL_SESSION objects.

The commit replaces the shim for SSL_SESSION_is_resumable() with a non
public approximation of it on systems shipped with OpenSSL 1.1.0. It
is not turned into a proper shim because it does not fully emulate the
behaviour of SSL_SESSION_is_resumable(), but in our case it is good
enough, as it still helps to protect the cache from pollution.

For systems shipped with OpenSSL 1.0.X and derivatives (e.g. older
versions of LibreSSL), the provided replacement perfectly mimics the
function it is intended to replace.
2022-05-23 18:25:18 +03:00
..
bind9 prevent a possible buffer overflow in configuration check 2022-05-13 19:59:58 -07:00
dns Require valid key for dst_key functions 2022-05-23 11:36:36 +02:00
irs Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
isc Do not provide a shim for SSL_SESSION_is_resumable() 2022-05-23 18:25:18 +03:00
isccc Keep the list of scheduled events on the timer 2022-04-01 23:45:23 +02:00
isccfg Rename "hostname" to "remote-hostname" within "tls" 2022-05-03 17:15:43 +03:00
ns Extend TLS context cache with TLS client session cache 2022-05-20 20:13:20 +03:00
.gitignore The isc/platform.h header has been completely removed 2021-07-06 05:33:48 +00:00
Makefile.am move samples/resolve.c to bin/tests/system 2021-04-16 14:29:43 +02:00
unit-test-driver.sh.in Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00