Will TLSv1.3 always send session ticket?

Matt Caswell matt at openssl.org
Thu Sep 16 09:05:44 UTC 2021



On 16/09/2021 09:58, Jaya Muthiah wrote:
>> TLSv1.3 does not require the server to send any tickets if it decides not to.
> What makes it decide NO TO. Here I am particularly interested in
> OpenSSL implementation only.
> 
>> In OpenSSL it is possible to configure the server to set the number of tickets that are sent - including down to 0.
> 
> I understand that part that, my query was for any condition not in the
> user's hand. So let me rephrase - if openssl is configured to send one
> ticket by calling SSL_CTX_set_num_tickets(), is there a condition
> under which OpenSSL will not send session tickets?
> 

No. Unless you configure the server otherwise OpenSSL will always send 
session ticket(s) in TLSv1.3.

Matt


More information about the openssl-users mailing list