Will TLSv1.3 always send session ticket?
Matt Caswell
matt at openssl.org
Thu Sep 16 09:05:44 UTC 2021
On 16/09/2021 09:58, Jaya Muthiah wrote:
>> TLSv1.3 does not require the server to send any tickets if it decides not to.
> What makes it decide NO TO. Here I am particularly interested in
> OpenSSL implementation only.
>
>> In OpenSSL it is possible to configure the server to set the number of tickets that are sent - including down to 0.
>
> I understand that part that, my query was for any condition not in the
> user's hand. So let me rephrase - if openssl is configured to send one
> ticket by calling SSL_CTX_set_num_tickets(), is there a condition
> under which OpenSSL will not send session tickets?
>
No. Unless you configure the server otherwise OpenSSL will always send
session ticket(s) in TLSv1.3.
Matt
More information about the openssl-users
mailing list