tls session ticket patch

mimuret · January 21, 2019, 10:53am

Hi ,

I wrote tls session ticket patch (like nginx).
and tls cipher patch.
https://github.com/mimuret/unbound-session-ticket-keys

When activate TLS session ticket, the QPS performance is approximately doubled.

Fun DoT !

Wouter · January 23, 2019, 10:25am

Hi Manabu,

Thank you very much for the patches, I have integrated them into the
unbound code.

Best regards, Wouter

chantra · January 23, 2019, 11:23am

Great stuff!

The believe the patch had a typo which made set_cyphersuite available for pretty much all OpenSSL versions.

#if OPENSSL_VERSION_NUMBER >= 0x1010101

Should most likely be something along

#if OPENSSL_VERSION_NUMBER >= 0x10101010

Manu