Re: TLS Session Ticket Key Format

2014-08-27 Thread Bill Zeng
Thanks for the feedback. The implementation is not as complex as it sounds. It's only a few lines of code and requires adding one configuration option to SSL config, which is the number of keys in rotation. Even that can be obviated. On Tue, Aug 26, 2014 at 3:53 PM, James Peach wrote: > On Aug

Re: TLS Session Ticket Key Format

2014-08-26 Thread James Peach
On Aug 25, 2014, at 1:21 PM, Bill Zeng wrote: > Thanks for the comments. We can stick to the current byte-blob ticket key > format. I would like to extend it a little to store multiple ticket keys > for rotation. A new key is generated and appended to the ticket key file > while the oldest one (a

Re: TLS Session Ticket Key Format

2014-08-26 Thread Bill Zeng
ping On Mon, Aug 25, 2014 at 1:21 PM, Bill Zeng wrote: > Thanks for the comments. We can stick to the current byte-blob ticket key > format. I would like to extend it a little to store multiple ticket keys > for rotation. A new key is generated and appended to the ticket key file > while the ol

Re: TLS Session Ticket Key Format

2014-08-25 Thread Bill Zeng
Thanks for the comments. We can stick to the current byte-blob ticket key format. I would like to extend it a little to store multiple ticket keys for rotation. A new key is generated and appended to the ticket key file while the oldest one (at the beginning of the file) gets removed (assume we hav

Re: TLS Session Ticket Key Format

2014-08-22 Thread Bill Zeng
On Fri, Aug 22, 2014 at 12:14 PM, James Peach wrote: > On Aug 22, 2014, at 10:35 AM, Manjesh Nilange > wrote: > > > On Thu, Aug 21, 2014 at 4:37 PM, James Peach wrote: > > > >> On Aug 21, 2014, at 3:56 PM, Bill Zeng wrote: > >> > >>> Hi all, > >>> > >>> I am new to ATS and my understanding of

Re: TLS Session Ticket Key Format

2014-08-22 Thread James Peach
On Aug 22, 2014, at 10:35 AM, Manjesh Nilange wrote: > On Thu, Aug 21, 2014 at 4:37 PM, James Peach wrote: > >> On Aug 21, 2014, at 3:56 PM, Bill Zeng wrote: >> >>> Hi all, >>> >>> I am new to ATS and my understanding of ATS is limited. I am working on a >>> project to enable session resumpt

Re: TLS Session Ticket Key Format

2014-08-22 Thread Manjesh Nilange
On Thu, Aug 21, 2014 at 4:37 PM, James Peach wrote: > On Aug 21, 2014, at 3:56 PM, Bill Zeng wrote: > > > Hi all, > > > > I am new to ATS and my understanding of ATS is limited. I am working on a > > project to enable session resumption using session tickets. Session > tickets > > are encrypted

Re: TLS Session Ticket Key Format

2014-08-22 Thread Bill Zeng
Thanks for the reply! On Thu, Aug 21, 2014 at 7:50 PM, Wei Sun wrote: > > > On 8/22/14, 10:06, "Bill Zeng" wrote: > > >Hi James, > > > >Thanks for the reply! > > > >On Thu, Aug 21, 2014 at 4:37 PM, James Peach wrote: > > > >> On Aug 21, 2014, at 3:56 PM, Bill Zeng wrote: > >> > >> > Hi all, >

Re: TLS Session Ticket Key Format

2014-08-21 Thread Wei Sun
On 8/22/14, 10:06, "Bill Zeng" wrote: >Hi James, > >Thanks for the reply! > >On Thu, Aug 21, 2014 at 4:37 PM, James Peach wrote: > >> On Aug 21, 2014, at 3:56 PM, Bill Zeng wrote: >> >> > Hi all, >> > >> > I am new to ATS and my understanding of ATS is limited. I am working >>on a >> > projec

Re: TLS Session Ticket Key Format

2014-08-21 Thread Bill Zeng
Hi James, Thanks for the reply! On Thu, Aug 21, 2014 at 4:37 PM, James Peach wrote: > On Aug 21, 2014, at 3:56 PM, Bill Zeng wrote: > > > Hi all, > > > > I am new to ATS and my understanding of ATS is limited. I am working on a > > project to enable session resumption using session tickets. Se

Re: TLS Session Ticket Key Format

2014-08-21 Thread James Peach
On Aug 21, 2014, at 3:56 PM, Bill Zeng wrote: > Hi all, > > I am new to ATS and my understanding of ATS is limited. I am working on a > project to enable session resumption using session tickets. Session tickets > are encrypted with session ticket keys which need to be rotated for > security. Cu