MyFavMirrors/minio
1
0
Fork 0
mirror of https://github.com/minio/minio.git synced 2024-12-24 06:05:55 -05:00
Code Issues Packages Projects Releases Wiki Activity

Add support of TLS session tickets with KES server (#14577)

Browse Source 
Reduce overhead for communication between MinIO server and KES server.
This commit is contained in:
Anis Elleuch 2022-03-18 23:14:10 +01:00 committed by GitHub
parent 61eb9d4e29
commit b20ecc7b54
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
internal/kms/kes.go
View File

@ -27,6 +27,10 @@ import (
"github.com/minio/kes"
)
const (
tlsClientSessionCacheSize = 100
)
// Config contains various KMS-related configuration
// parameters - like KMS endpoints or authentication
// credentials.
@ -59,9 +63,10 @@ func NewWithConfig(config Config) (KMS, error) {
copy(endpoints, config.Endpoints)
client := kes.NewClientWithConfig("", &tls.Config{
MinVersion: tls.VersionTLS12,
Certificates: []tls.Certificate{config.Certificate},
RootCAs: config.RootCAs,
MinVersion: tls.VersionTLS12,
Certificates: []tls.Certificate{config.Certificate},
RootCAs: config.RootCAs,
ClientSessionCache: tls.NewLRUClientSessionCache(tlsClientSessionCacheSize),
})
client.Endpoints = endpoints
return &kesClient{