Comments (2)
If session ticket file is used, maybe due to a cluster sharing the traffic, it is the responsibility of the user to update/sync the session ticket file, it cannot be renewed automatically.
If use the built-in SHM session ticket, it is rotated automatically, the timestamp only updates when the key has been updated. At lest, the code is intended to do that. If you found otherwise, please elaborate.
https://www.openssl.org/docs/man1.0.2/man3/RAND_bytes.html is cryptographically strong pseudo-random bytes
, do not see any need to change.
from openlitespeed.
Hi, thanks for the response!
I was only referring to files, I didn't look at the built-in keys.
I was just reading the code to find out how key rotation would be handled for session ticket key files, since I couldn't find that in the docs.
Might be an oversight on my end, in that case I'd be grateful about a link to the relevant page.
Either way, your response answers the question I had, thank you.
from openlitespeed.
Related Issues (20)
- Compiling on macos reports errors HOT 4
- percona the infamous one HOT 1
- Please get packages included in all mainstram OS distros.
- FreeBSD support? HOT 1
- cannot run an ESM app HOT 6
- Documentation: Lack of ESI Support Causes issues with WordPress Nonces HOT 2
- v.1.7.19 dowload bug and some errors HOT 6
- Don't support this system? CentOS Stream 8? HOT 3
- QUIC library is ignoring error log settings HOT 3
- Segmentation fault HOT 2
- OLS, Mediawiki, and LiteSpeedCache HOT 1
- FreeBSD: Compilation warnings again with 1.8.0 HOT 2
- Requesting security contact HOT 16
- File ".rtreport" affects the useful life of an SSD - WRITE I/O HOT 1
- webp replacment problem HOT 2
- SSL issue with binding multiple alias domains in vhost.conf HOT 1
- wrong header set when loading pre compressed js or css files HOT 1
- How to upgrade to 1.8.0 using apt? HOT 3
- Segmentation fault on logo fetch with minimal configuration HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from openlitespeed.