Skip to content

[Backport to 9.18] Fix TLS session resumption via IDs when Mutual TLS is used

Artem Boldariev requested to merge 3725-mutual-tls-session-resumption-fix-v9-18 into v9_18

This commit fixes TLS session resumption via session IDs when client certificates are used. To do so it makes sure that session ID contexts are set within server TLS contexts. See OpenSSL documentation for 'SSL_CTX_set_session_id_context()', the "Warnings" section.

Backport of !7215 (merged)

Closes #3725 (closed)

Edited by Michał Kępień

Merge request reports