tree 50cdfb00a344f0549e43ddcb053ee853d5551a76
parent eaabd52e29a29187f9829fe727028a6ca530cbf9
author Nenad Merdanovic <nmerdan@anine.io> 1425063409 +0100
committer Willy Tarreau <w@1wt.eu> 1425161422 +0100
encoding latin1

MEDIUM: Add support for configurable TLS ticket keys

Until now, the TLS ticket keys couldn't have been configured and
shared between multiple instances or multiple servers running HAproxy.
The result was that if a request got a TLS ticket from one instance/server
and it hits another one afterwards, it will have to go through the full
SSL handshake and negotation.

This patch enables adding a ticket file to the bind line, which will be
used for all SSL contexts created from that bind line. We can use the
same file on all instances or servers to mitigate this issue and have
consistent TLS tickets assigned. Clients will no longer have to negotiate
every time they change the handling process.

Signed-off-by: Nenad Merdanovic <nmerdan@anine.io>