From: Glenn Strauss <gstrauss@gluelogic.com>
Date: Wed, 28 Oct 2020 20:39:58 +0000 (-0400)
Subject: mbedtls: enable session tickets
X-Git-Url: http://git.cdn.openwrt.org/?a=commitdiff_plain;h=a8513e24615b01d3199f7f5c610ceb8ca8c74f20;p=openwrt%2Fstaging%2Flinusw.git

mbedtls: enable session tickets

session tickets are a feature of TLSv1.2 and require less memory
and overhead on the server than does managing a session cache

Building mbedtls with support for session tickets will allow the
feature to be used with lighttpd-1.4.56 and later.

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
---

diff --git a/package/libs/mbedtls/patches/200-config.patch b/package/libs/mbedtls/patches/200-config.patch
index 1e3d41f0eb..67f331674c 100644
--- a/package/libs/mbedtls/patches/200-config.patch
+++ b/package/libs/mbedtls/patches/200-config.patch
@@ -126,15 +126,6 @@
  
  /**
   * \def MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO
-@@ -1690,7 +1690,7 @@
-  *
-  * Comment this macro to disable support for SSL session tickets
-  */
--#define MBEDTLS_SSL_SESSION_TICKETS
-+//#define MBEDTLS_SSL_SESSION_TICKETS
- 
- /**
-  * \def MBEDTLS_SSL_EXPORT_KEYS
 @@ -1720,7 +1720,7 @@
   *
   * Comment this macro to disable support for truncated HMAC in SSL
@@ -216,15 +207,6 @@
  
  /**
   * \def MBEDTLS_RSA_C
-@@ -2913,7 +2913,7 @@
-  *
-  * Requires: MBEDTLS_CIPHER_C
-  */
--#define MBEDTLS_SSL_TICKET_C
-+//#define MBEDTLS_SSL_TICKET_C
- 
- /**
-  * \def MBEDTLS_SSL_CLI_C
 @@ -3013,7 +3013,7 @@
   *
   * This module provides run-time version information.