RE: How to do SSL key rotation over a long lived connection

2007-03-16 Thread David Schwartz
> > Does anyone know how can the encryption key used to > > secure SSL communication be changed/rotated over a > > long-lived (hours to days) SSL connection to prevent > > sniffers from deciphering the key by analyzing a > > arge amount of traffic? > Look at SSL_renegotiate() and SSL_renegotiate_

RE: How to do SSL key rotation over a long lived connection

2007-03-16 Thread Mark
Paul, > Does anyone know how can the encryption key used to > secure SSL communication be changed/rotated over a > long-lived (hours to days) SSL connection to prevent > sniffers from deciphering the key by analyzing a > arge amount of traffic? Look at SSL_renegotiate() and SSL_renegotiate_pen