config/tls: Disable TLS session tickets

Workaround for Outlook delivery issues. See #730
foxcpp · Nov 24, 2024 · fc179fc · fc179fc
1 parent cbeadf1
commit fc179fc
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/framework/config/tls/server.go b/framework/config/tls/server.go
@@ -69,7 +69,10 @@ func TLSDirective(m *config.Map, node config.Node) (interface{}, error) {
 }
 
 func readTLSBlock(globals map[string]interface{}, blockNode config.Node) (*TLSConfig, error) {
-	baseCfg := tls.Config{}
+	baseCfg := tls.Config{
+		// Workaround for issue https://github.com/foxcpp/maddy/issues/730
+		SessionTicketsDisabled: true,
+	}
 
 	var loader module.TLSLoader
 	if len(blockNode.Args) > 0 {