Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for RFC5077 session tickets #16

Closed
lkarsten opened this issue May 19, 2015 · 2 comments
Closed

Add support for RFC5077 session tickets #16

lkarsten opened this issue May 19, 2015 · 2 comments
Assignees

Comments

@lkarsten
Copy link
Contributor Author

We need some way to sync the current (and previous) encryption key.
Initially we can start out with a static key set in the configuration.

Using key expansion to be able to rotate periodically would be nice, but needs some thought around when to rotate them and if clocks are in sync between servers.

We can perhaps use some hash chain for this, if we can recognize which key name that was used when a request arrives. In that case we can precompute the n before/next, and let the hitch instance with the most advanced clock set the pace. The others will follow onto the next chain entry either when they see the rebalanced client, or by themselves when their clock gets there.

We get a rotation period in the configuration ("daily") without having to explicitly set up communication between hitches.

@lkarsten
Copy link
Contributor Author

lkarsten commented Mar 1, 2016

No progress, and not scheduled to be worked on for a while.

Moving this to the future features: https://github.com/varnish/hitch/wiki/Future-features

@lkarsten lkarsten closed this as completed Mar 1, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants