From 8418b0122a8a6296cef92790f811a58f7c05911c Mon Sep 17 00:00:00 2001 From: Camila Ayres Date: Wed, 29 May 2024 19:19:56 +0200 Subject: [PATCH] Remove ssl options to re-use encryption session for different TCP connections. One option is said to be possibly breaking some sites: QSsl::SslOptionDisableSessionTickets It disables the SSL session ticket extension and some servers are not compatible with the extension. Signed-off-by: Camila Ayres --- src/libsync/account.cpp | 5 ----- 1 file changed, 5 deletions(-) diff --git a/src/libsync/account.cpp b/src/libsync/account.cpp index 9be583b49..3feb65b46 100644 --- a/src/libsync/account.cpp +++ b/src/libsync/account.cpp @@ -483,11 +483,6 @@ QSslConfiguration Account::getOrCreateSslConfig() // "An internal error number 1060 happened. SSL handshake failed, client certificate was requested: SSL error: sslv3 alert handshake failure" QSslConfiguration sslConfig = QSslConfiguration::defaultConfiguration(); - // Try hard to reuse session for different requests - sslConfig.setSslOption(QSsl::SslOptionDisableSessionTickets, false); - sslConfig.setSslOption(QSsl::SslOptionDisableSessionSharing, false); - sslConfig.setSslOption(QSsl::SslOptionDisableSessionPersistence, false); - sslConfig.setOcspStaplingEnabled(Theme::instance()->enableStaplingOCSP()); return sslConfig; -- 2.30.2