if we don't know the openssl version, we can't turn off session tickets

This commit is contained in:
Erica Portnoy 2019-08-26 17:19:54 -07:00
parent 3b7d7691c2
commit 17e758efef

View file

@ -131,7 +131,7 @@ class NginxConfigurator(common.Installer):
def mod_ssl_conf_src(self):
"""Full absolute path to SSL configuration file source."""
use_tls13 = self.version >= (1, 13, 0)
session_tix_off = self.version >= (1, 5, 9) and
session_tix_off = self.version >= (1, 5, 9) and self.openssl_version and
LooseVersion(self.openssl_version) >= LooseVersion('1.0.2l')
if use_tls13: