On Mon, Sep 12, 2016 at 05:35:06PM +0300, Andrey Kulikov wrote:
> I'm using OpenSSL 1.0.2g
> In my client I would like to disable SSL session resumption completely (for
> test purposes).
The odd thing is that on the client side, nothing in OpenSSL does
resumption by default, becaus
Hello,
I'm using OpenSSL 1.0.2g
In my client I would like to disable SSL session resumption completely (for
test purposes).
I do prior to connection, after creating SSL_CTX:
SSL_CTX_set_session_cache_mode(ctx, SSL_SESS_CACHE_OFF);
SSL_CTX_set_options(ctx, SSL_OP_NO_TICKET);
But what I s
On 01/08/16 05:39, Prabhat Puroshottam wrote:
>
>> IIRC the behaviour is different in the forthcoming OpenSSL 1.1.0. In
>> that version the client does not fix its version to the session version.
>> The client remains version flexible - if the server does not wish to use
>> the same version as w
> IIRC the behaviour is different in the forthcoming OpenSSL 1.1.0. In
> that version the client does not fix its version to the session version.
> The client remains version flexible - if the server does not wish to use
> the same version as was in the session then they can still negotiate a
> di
On 29/07/16 16:15, Prabhat Puroshottam wrote:
> We are using session resumption with openssl, and to support that we are
> storing sessions in a file.
>
> On the server side the allowed TLS version can be configured and server
> admin can change it. It can
>
> be changed for example to allow on
We are using session resumption with openssl, and to support that we are
storing sessions in a file.
On the server side the allowed TLS version can be configured and server admin
can change it. It can
be changed for example to allow only TLS 1.2. The problem is that if the client
has SSL sessi
Baig, Attaullah wrote:
> Please help am I missing something
You are most likely not using the correct header files.
Some constants changed.
--
Arno Garrels
>
> Baig
__
OpenSSL Project http://www.
Please help am I missing something
Baig
On Tue, Jul 17, 2001 at 10:10:32PM +0300, Marko Asplund wrote:
> does OpenSSL automatically resume SSL sessions on server side if the same
> SSL_CTX object is used for all the client connections? or are some steps
> required to enable session resumption?
The server automatically supports session
does OpenSSL automatically resume SSL sessions on server side if the same
SSL_CTX object is used for all the client connections? or are some steps
required to enable session resumption?
what about on the client side? i've gotten the impression that the client
application needs to keep track of s
10 matches
Mail list logo