Ticket #13586: 0001-Use-the-new-security.ssl.disable_session_identifiers.patch

File 0001-Use-the-new-security.ssl.disable_session_identifiers.patch, 1.8 KB (added by dcf, 5 years ago)
  • Bundle-Data/PTConfigs/meek-http-helper-user.js

    From d506b709049682197cd76c84c54dc936a9c8fe1b Mon Sep 17 00:00:00 2001
    From: David Fifield <david@bamsoftware.com>
    Date: Sun, 26 Oct 2014 19:06:17 +0000
    Subject: [PATCH] Use the new security.ssl.disable_session_identifiers pref.
    
    This is to reenable the TLS session tickets that are disabled by Tor
    Browser, so the TLS client hello matches that of stock Firefox.
    
    https://trac.torproject.org/projects/tor/ticket/13442#comment:1
    https://trac.torproject.org/projects/tor/ticket/11183#comment:9
    
    The previously used pref security.enable_tls_session_tickets has been
    removed and replaced by security.ssl.disable_session_identifiers.
    
    https://bugzilla.mozilla.org/show_bug.cgi?id=917049
    https://bugzilla.mozilla.org/show_bug.cgi?id=967977
    https://trac.torproject.org/projects/tor/ticket/10822
    https://gitweb.torproject.org/tor-browser.git/commitdiff/5524ae43780e4738310852cc2a0b7c5d25aa69ed
    ---
     Bundle-Data/PTConfigs/meek-http-helper-user.js |    4 ++--
     1 file changed, 2 insertions(+), 2 deletions(-)
    
    diff --git a/Bundle-Data/PTConfigs/meek-http-helper-user.js b/Bundle-Data/PTConfigs/meek-http-helper-user.js
    index cddc237..eb94d1d 100644
    a b user_pref("browser.dom.window.dump.enabled", true); 
    66
    77// Enable TLS session tickets (disabled by default in Tor Browser). Otherwise
    88// there is a missing TLS extension.
    9 // https://trac.torproject.org/projects/tor/ticket/11183#comment:9
    10 user_pref("security.enable_tls_session_tickets", true);
     9// https://trac.torproject.org/projects/tor/ticket/13442#comment:1
     10user_pref("security.ssl.disable_session_identifiers", false);
    1111
    1212// Disable safe mode. In case of a crash, we don't want to prompt for a
    1313// safe-mode browser that has extensions disabled and no proxy.