Current deployment supports both TLS v1.2 & v1.3.
Session resumption (via session tickets) already works when the client uses TLS v1.2 (Enter Q to quit):

openssl s_client -connect 213.188.218.85:853 -reconnect -servername max.rethinkdns.com \
-tls1_2 | grep -E "^(New|Reused)"

Session Resumption is working with TLS v1.3 too (Enter Q to quit):

openssl s_client -connect 213.188.218.85:853 -servername max.rethinkdns.com -tls1_3 \
-sess_out /tmp/sess.pem | grep -E "^(New|Reused)"
openssl s_client -connect 213.188.218.85:853 -servername max.rethinkdns.com -tls1_3 \
-sess_in /tmp/sess.pem | grep -E "^(New|Reused)"

Session Resumption on TLS v1.2

Using Session Tickets

NodeJS: ✔️ Works
- Session tickets are sent during handshake and reconnecting resumes session.
Deno: ✔️ Works

Using Session IDs

Not explored

Session Resumption on TLS v1.3

Spec: https://www.rfc-editor.org/rfc/rfc8446#section-2.2
Sessions are not established until full handshake is complete.

Using Session Tickets (PSK)

NodeJS ✔️ (Verified from server side too)
- Works while testing (Enter Q to quit):
```
 openssl s_client -connect dns.rethinkdns.localhost:10000 -sess_out /tmp/sess.pem \
 | grep -E "^(New|Reused)"
 openssl s_client -connect dns.rethinkdns.localhost:10000 -sess_in /tmp/sess.pem \
 | grep -E "^(New|Reused)"
```
- Two (different) session tickets are sent post handshake.
- ❓ Unsupported? Support TLS session resumption in accordance with TLS 1.3 specs (using PSK) nodejs/node#39691

Deno: ✔️

Works while testing (Enter Q to quit):

 openssl s_client -connect dns.rethinkdns.localhost:10000 -sess_out /tmp/sess.pem \
 | grep -E "^(New|Reused)"
 openssl s_client -connect dns.rethinkdns.localhost:10000 -sess_in /tmp/sess.pem \
 | grep -E "^(New|Reused)"

One session ticket is sent post handshake.
❓ No documentation found.

Unable to test properly due to openssl s_client bug: s_client -reconnect option is broken with TLSv1.3 openssl/openssl#10714

Using Session IDs

Implementation problems...

0-RTT on TLS v1.3

NodeJS 💀
- Support TLS 1.3 0-RTT nodejs/node#28931

Uh oh!

Node: Restore TLS sessions where possible #30

Description

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions