summaryrefslogtreecommitdiffstats
path: root/daemon/tls_session_ticket-srv.c
diff options
context:
space:
mode:
authorVladimír Čunát <vladimir.cunat@nic.cz>2018-06-29 11:34:12 +0200
committerPetr Špaček <petr.spacek@nic.cz>2018-06-29 12:32:40 +0200
commit10b9aa70912c940106b28a982ca5facd0b25053b (patch)
treef4f68685c68ce09b03260a59a446a55f3e2d6f25 /daemon/tls_session_ticket-srv.c
parentMerge !614: ta_sentinel: remove limit for IN class (diff)
downloadknot-resolver-10b9aa70912c940106b28a982ca5facd0b25053b.tar.xz
knot-resolver-10b9aa70912c940106b28a982ca5facd0b25053b.zip
TLS session resumption: disable on gnutls < 3.5
Diffstat (limited to 'daemon/tls_session_ticket-srv.c')
-rw-r--r--daemon/tls_session_ticket-srv.c4
1 files changed, 4 insertions, 0 deletions
diff --git a/daemon/tls_session_ticket-srv.c b/daemon/tls_session_ticket-srv.c
index 11a7e319..9c7acbb1 100644
--- a/daemon/tls_session_ticket-srv.c
+++ b/daemon/tls_session_ticket-srv.c
@@ -240,6 +240,10 @@ tst_ctx_t * tls_session_ticket_ctx_create(uv_loop_t *loop, const char *secret,
size_t secret_len)
{
assert(loop && (!secret_len || secret));
+ #if GNUTLS_VERSION_NUMBER < 0x030500
+ /* We would need different SESSION_KEY_SIZE; avoid assert. */
+ return NULL;
+ #endif
tst_ctx_t *ctx = tst_key_create(secret, secret_len, loop);
if (ctx) {
tst_key_check(&ctx->timer, true);