enbility / ship-go / 24188525287

93%

Build Type

push

github

Committed by web-flow

Commit Message

Disable TLS session resumption to prevent trust bypass (#71) (#72)

Resumed TLS sessions skip VerifyPeerCertificate, allowing a device whose
trust was removed to re-establish a TLS connection via a cached session
ticket. Disable session tickets on the server per SHIP 9.6 (session
resumption is optional).

Fixes https://github.com/enbility/ship-go/issues/71

Coverage Stats

4 of 4 new or added lines in 1 file covered. (100.0%)

2 existing lines in 1 file now uncovered.

3542 of 3736 relevant lines covered (94.81%)

6946.09 hits per line