[Ach] TLS session tickets "break" PFS

[Reed Loden]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, 24 Sep 2014 12:24:01 +0200
Aaron Zauner <azet at azet.org> wrote:

> Well it has to be supported by the TLS stack and webserver - for example
> on the TLS list it was mentioned that nginx does not support this as of now.

- From the TLS list, "Right now e.g. nginx isn't rotation anything and
shares sessions and keys among all defined servers. They are blaming
OpenSSL for that, but that's just a library and the server should
rotate and distribute the keys while each instance has its own library."

Not sure why that would be nginx-specific... Fairly sure Apache doesn't
do that either. I do think that web servers should improve this
situation somewhat (perhaps by at least supporting automagic creation
and rotation of session ticket keys on an individual instance basis,
leaving the clustering aspect to external means).

At least both Apache and nginx support ways of specifying the actual
TLS session ticket keys (as files), which is what you need in order to
do rotation (outside of the web server doing it itself).

https://httpd.apache.org/docs/trunk/mod/mod_ssl.html#sslsessionticketkeyfile
http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_ticket_key

~reed
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iKYEARECAGYFAlQjByRfFIAAAAAALgAoaXNzdWVyLWZwckBub3RhdGlvbnMub3Bl
bnBncC5maWZ0aGhvcnNlbWFuLm5ldDZCNTZGOUFDMDdCNjg1RDdEQzQ1NjBEQTZC
QTIyMjI2RjNDMzNENUEACgkQa6IiJvPDPVri/ACfRWF0JkkK+OO6HzueqqkOLp9X
PWIAoKe2ad3KwB+qUjsTk8HBV8tKqQ8D
=uKz1
-----END PGP SIGNATURE-----