Skip to content

Commit f11cd84

Browse files
committed
MB-59835: Disable OpenSSL session caching
OpenSSL session caching has been linked to a crash, disabling the cache should avoid the problem. Change-Id: Id03d2281cea61720cdef38b574ac6d95a9858a5e Reviewed-on: https://review.couchbase.org/c/kv_engine/+/201619 Reviewed-by: Trond Norbye <[email protected]> Well-Formed: Restriction Checker Tested-by: Jim Walker <[email protected]>
1 parent 3aa62bb commit f11cd84

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

daemon/tls_configuration.cc

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -174,6 +174,8 @@ cb::openssl::unique_ssl_ctx_ptr TlsConfiguration::createServerContext(
174174
SSL_CTX_set_mode(server_ctx,
175175
SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER |
176176
SSL_MODE_ENABLE_PARTIAL_WRITE);
177+
// MB-59835: Session cache has been linked to a crash..
178+
SSL_CTX_set_session_cache_mode(server_ctx, SSL_SESS_CACHE_OFF);
177179

178180
if (!SSL_CTX_load_verify_locations(server_ctx, ca_file.c_str(), nullptr)) {
179181
throw CreateSslContextException("Failed to use: " + ca_file,

0 commit comments

Comments
 (0)