diff options
| author | Sebastian Benoit <benno@cvs.openbsd.org> | 2020-10-22 08:00:25 +0000 |
|---|---|---|
| committer | Sebastian Benoit <benno@cvs.openbsd.org> | 2020-10-22 08:00:25 +0000 |
| commit | 7de2a026c0a95b3465684b51fddbf80147a2928f (patch) | |
| tree | 79f09f1a964293249e5af12576bfff7ec7b1dc48 | |
| parent | 2476170ed9c590809d0bb3eca5580ce28de8d5c1 (diff) | |
support for session resumption in TLS1.3 does not exist yet, as
confirmed by tb@. While there remove the "no" in front of the statement.
text from tb@
| -rw-r--r-- | usr.sbin/relayd/relayd.conf.5 | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/usr.sbin/relayd/relayd.conf.5 b/usr.sbin/relayd/relayd.conf.5 index 428c7519e8e..a3b42d5a543 100644 --- a/usr.sbin/relayd/relayd.conf.5 +++ b/usr.sbin/relayd/relayd.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: relayd.conf.5,v 1.200 2020/10/22 07:48:50 benno Exp $ +.\" $OpenBSD: relayd.conf.5,v 1.201 2020/10/22 08:00:24 benno Exp $ .\" .\" Copyright (c) 2006 - 2016 Reyk Floeter <reyk@openbsd.org> .\" Copyright (c) 2006, 2007 Pierre-Yves Ritschard <pyr@openbsd.org> @@ -1006,11 +1006,11 @@ OCSP server for the certificate in use, and can be created using Prefer the client's cipher list over the server's preferences when choosing a cipher for the connection. The default is to prefer the server's cipher list. -.It Ic no session tickets -Disable TLS session tickets. +.It Ic session tickets +Enable TLS session tickets. .Xr relayd 8 supports stateless TLS session tickets (RFC 5077) to implement TLS session -resumption. +resumption for connections not using TLSv1.3. The default is to disable session tickets. .It Ic no tlsv1.3 Disable the TLSv1.3 protocol. |