Internally, my company uses pregenerated SSL sessions.  I am thinking about
maybe changing haproxy to load and use our sessions.  Would there be
interest in some sort of opensource change to allow session loading as some
easy extension/config for haproxy.  Like some config

ssl_get_sessions_from_exe=custom_session_emitter
where custom_session_emitter writes the appropriate ASN1/PEM session data
or some such?

Or

ssl_get_sessions_from_file=sessions.pem

(less good because we encrypt the session data on disk).

If not, I'll just strive to make my patches clean against the tree, but if
so, I'm happy to contribute the interface.  (As far as I can tell, not many
places are using pregenerated sessions, but to do save a lot of latency).

--Chris

Reply via email to