boring2/hyper-boring
Eric Rosenberg 8db6134c75 bound session cache
When establishing new TLS sessions, servers may send multiple session
tickets (RFC8446 4.6.1). hyper-boring caches tickets without placing a
limit on how many tickets are cached. This leads to unbounded growth of
hyper-boring's cache and leaves clients vulnerable to malicious servers
who might send many session tickets to exhaust a client's available
memory.

This change bounds the cache to a default of 8 tickets.
2024-04-07 17:03:52 -07:00
..
src bound session cache 2024-04-07 17:03:52 -07:00
test Don't use self-signed certs in hyper-boring tests 2024-01-03 15:43:52 +01:00
.gitignore Add hyper-boring 2020-11-11 20:29:54 +00:00
Cargo.toml Don't use self-signed certs in hyper-boring tests 2024-01-03 15:43:52 +01:00
LICENSE-APACHE Add hyper-boring 2020-11-11 20:29:54 +00:00
LICENSE-MIT Add hyper-boring 2020-11-11 20:29:54 +00:00
README.md Add hyper-boring 2020-11-11 20:29:54 +00:00

README.md

hyper-boring

Documentation

Hyper SSL support via BoringSSL.

License

Licensed under either of

at your option.

Contribution

Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.

Accolades

The project is based on a fork of hyper-openssl.