Session Ticket Lifetime

Traefik Traefik v3 (latest)
1

When testing my endpoint with testssl, I receive an overall grade of A+, which is great. However, I also get the following warning regarding the session ticket lifetime:

Session Ticket RFC 5077 hint 604800 seconds but: FS requires session ticket keys to be rotated < daily !

It seems that my session ticket lifetime is set to 7 days (604800 seconds), while forward secrecy (FS) recommends rotating session ticket keys at least once per day.

Is there a configuration setting where I can adjust the session ticket lifetime to 24 hours instead of the default 7 days?

I appreciate any guidance on this!

2

This may not happen if you set TLS 1.3 (doc).

3

TLS 1.3 is already functional in my setup. I also tried to set the minVersion to 1.3 but the ticket lifetime remains the same (7 days).

These are my dynamic tls settings:

tls:
  options:
    default:
      minVersion: VersionTLS12
      sniStrict: true
      cipherSuites:
       # Recommended ciphers for TLSv1.2
       - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
       - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
       - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
       # Recommended ciphers for TLSv1.3
       - TLS_CHACHA20_POLY1305_SHA256
       - TLS_AES_128_GCM_SHA256
       - TLS_AES_256_GCM_SHA384

I've also tested with:
openssl s_client -connect mydomain.com:443 -tls1_3