# HG changeset patch
# User Matthew Wild <mwild1@gmail.com>
# Date 1337297483 -3600
# Node ID 0c5091b8b83385c7fb5831f85fea51a519c8c38b
# Parent  c3e17766aead6b310b44c5785b342880465ad4ae
certmanager: Add no_ticket option for OpenSSL (we don't support resumption yet)

diff -r c3e17766aead -r 0c5091b8b833 core/certmanager.lua
--- a/core/certmanager.lua	Fri May 18 00:27:06 2012 +0100
+++ b/core/certmanager.lua	Fri May 18 00:31:23 2012 +0100
@@ -22,7 +22,7 @@
 -- Global SSL options if not overridden per-host
 local default_ssl_config = configmanager.get("*", "core", "ssl");
 local default_capath = "/etc/ssl/certs";
-local default_verify = (ssl and ssl.x509 and { "peer", "client_once", "continue", "ignore_purpose" }) or "none";
+local default_verify = (ssl and ssl.x509 and { "peer", "client_once", "continue", "ignore_purpose", "no_ticket" }) or "no_ticket";
 local default_options = { "no_sslv2" };
 
 function create_context(host, mode, user_ssl_config)