MyFavMirrors/minio
1
0
Fork 0
mirror of https://github.com/minio/minio.git synced 2024-12-25 06:35:56 -05:00
Code Issues Packages Projects Releases Wiki Activity

Add support of TLS session tickets with KES server (#14577)

Browse Source 
Reduce overhead for communication between MinIO server and KES server.
This commit is contained in:
Anis Elleuch 2022-03-18 23:14:10 +01:00 committed by GitHub
parent 61eb9d4e29
commit b20ecc7b54
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
internal/kms/kes.go
View File

@ -27,6 +27,10 @@ import (
"github.com/minio/kes" "github.com/minio/kes"
) )
const (
tlsClientSessionCacheSize = 100
)
// Config contains various KMS-related configuration // Config contains various KMS-related configuration
// parameters - like KMS endpoints or authentication // parameters - like KMS endpoints or authentication
// credentials. // credentials.
@ -62,6 +66,7 @@ func NewWithConfig(config Config) (KMS, error) {
MinVersion: tls.VersionTLS12, MinVersion: tls.VersionTLS12,
Certificates: []tls.Certificate{config.Certificate}, Certificates: []tls.Certificate{config.Certificate},
RootCAs: config.RootCAs, RootCAs: config.RootCAs,
ClientSessionCache: tls.NewLRUClientSessionCache(tlsClientSessionCacheSize),
}) })
client.Endpoints = endpoints client.Endpoints = endpoints
return &kesClient{ return &kesClient{