Revert disabling TLS session tickets in Apache (#7315)

mirror of https://github.com/certbot/certbot.git synced 2026-08-01 16:19:13 +02:00

See https://community.letsencrypt.org/t/ssl-error-after-cert-renew/99430.

The first commit of this PR is a simple, clean revert of #7191. Subsequent commits add back pieces of that PR we want to keep.

I also reverted #7299 which landed in a separate PR, but needs to be reverted to keep including the TLS config files in the certbot-apache package when it is built.

I tested this on Ubuntu 18.04 by installing a cert to Apache using Certbot master and then running certbot renew with this branch. I watched the Apache plugin update the configuration file to remove SSLSessionTickets off.

* Revert "Disable TLS session tickets for Apache 2.4.11+ (#7191)"

This reverts commit 9174c631d9.

* Keep hashes with TLS session tickets disabled.

* dont delete changelog entries

* add changelog entry

* Revert "Clean the useless entries in MANIFEST.in (#7299)"

This reverts commit f4d17d9a6b.

This commit is contained in:

Brad Warren

2019-08-08 16:23:37 -07:00

committed by

GitHub

parent 2911eda3bd

commit 120137eb8d

17 changed files with 56 additions and 109 deletions

CHANGELOG.md

+2 -1

View File

@@ -16,7 +16,8 @@ Certbot adheres to [Semantic Versioning](https://semver.org/).
 ### Fixed
 *
 * Stop disabling TLS session tickets in Apache as it caused TLS failures on
   some systems.
 More details about these changes can be found on our GitHub repo.