Re: [openssl-users] How to disable SSL session resumption completelly?

2016-09-12 Thread Viktor Dukhovni
On Mon, Sep 12, 2016 at 05:35:06PM +0300, Andrey Kulikov wrote: > I'm using OpenSSL 1.0.2g > In my client I would like to disable SSL session resumption completely (for > test purposes). The odd thing is that on the client side, nothing in OpenSSL does resumption by default, becaus

[openssl-users] How to disable SSL session resumption completelly?

2016-09-12 Thread Andrey Kulikov
Hello, I'm using OpenSSL 1.0.2g In my client I would like to disable SSL session resumption completely (for test purposes). I do prior to connection, after creating SSL_CTX: SSL_CTX_set_session_cache_mode(ctx, SSL_SESS_CACHE_OFF); SSL_CTX_set_options(ctx, SSL_OP_NO_TICKET); But what I s

Re: [openssl-users] SSL session resumption from different TLS version

2016-08-01 Thread Matt Caswell
On 01/08/16 05:39, Prabhat Puroshottam wrote: > >> IIRC the behaviour is different in the forthcoming OpenSSL 1.1.0. In >> that version the client does not fix its version to the session version. >> The client remains version flexible - if the server does not wish to use >> the same version as w

Re: [openssl-users] SSL session resumption from different TLS version

2016-07-31 Thread Prabhat Puroshottam
> IIRC the behaviour is different in the forthcoming OpenSSL 1.1.0. In > that version the client does not fix its version to the session version. > The client remains version flexible - if the server does not wish to use > the same version as was in the session then they can still negotiate a > di

Re: [openssl-users] SSL session resumption from different TLS version

2016-07-29 Thread Matt Caswell
On 29/07/16 16:15, Prabhat Puroshottam wrote: > We are using session resumption with openssl, and to support that we are > storing sessions in a file. > > On the server side the allowed TLS version can be configured and server > admin can change it. It can > > be changed for example to allow on

[openssl-users] SSL session resumption from different TLS version

2016-07-29 Thread Prabhat Puroshottam
We are using session resumption with openssl, and to support that we are storing sessions in a file. On the server side the allowed TLS version can be configured and server admin can change it. It can be changed for example to allow only TLS 1.2. The problem is that if the client has SSL sessi

Re: SSL session resumption not working after upgrading from openssl-0.9.7e to openssl-0.9.8g

2008-11-21 Thread Arno Garrels
Baig, Attaullah wrote: > Please help am I missing something You are most likely not using the correct header files. Some constants changed. -- Arno Garrels > > Baig __ OpenSSL Project http://www.

SSL session resumption not working after upgrading from openssl-0.9.7e to openssl-0.9.8g

2008-11-21 Thread Baig, Attaullah
Please help am I missing something Baig

Re: SSL session resumption

2001-07-17 Thread Lutz Jaenicke
On Tue, Jul 17, 2001 at 10:10:32PM +0300, Marko Asplund wrote: > does OpenSSL automatically resume SSL sessions on server side if the same > SSL_CTX object is used for all the client connections? or are some steps > required to enable session resumption? The server automatically supports session

SSL session resumption

2001-07-17 Thread Marko Asplund
does OpenSSL automatically resume SSL sessions on server side if the same SSL_CTX object is used for all the client connections? or are some steps required to enable session resumption? what about on the client side? i've gotten the impression that the client application needs to keep track of s