SSL_SESSION_set1_ticket ?

[Jeremy Harris]

On 02/04/2019 17:03, Viktor Dukhovni wrote:
> Does the server have a temporally stable ticket decryption key?
> Is this Exim?  Is the server's SSL_CTX persistent and shared
> across multiple connections?

Ah, right.  Unlike GnuTLS, the STEK is tied to the SSL_CTX and,
as you say, Exim initialises that fresh per connection.
Rearchitecting that is more effort than it's worth spending
on TLS 1.2, I think.
-- 
Thanks,
  Jeremy