Re: [Openvpn-devel] Enabling TLS Session Resumption in OpenVPN

2016-02-20 Thread Steffan Karger
On 20 Feb 2016 9:19 am, "Gert Doering" wrote: > On Sat, Feb 20, 2016 at 11:40:28AM +0530, Shubham Chauhan wrote: > > the --float option seems to be interesting! > > > > Help me understand one scenario. > > If I want to transfer a VPN session from one VPN server to another, keeping > > the same ope

Re: [Openvpn-devel] Enabling TLS Session Resumption in OpenVPN

2016-02-20 Thread Steffan Karger
On 20 Feb 2016 10:03 am, "Steffan Karger" wrote: > On 20 Feb 2016 9:19 am, "Gert Doering" wrote: > > On Sat, Feb 20, 2016 at 11:40:28AM +0530, Shubham Chauhan wrote: > > > the --float option seems to be interesting! > > > > > > Help me understand one scenario. > > > If I want to transfer a VPN se

Re: [Openvpn-devel] Enabling TLS Session Resumption in OpenVPN

2016-02-20 Thread Shubham Chauhan
I read that Openvpn is a peer to peer application. The so called client server roles are only for the TLS negotiations and setting up the TLS channel. That's why my main focus was on TLS handshake. I need that roaming at the server end. The single client multi server (1 server at a time) kind of an

Re: [Openvpn-devel] Enabling TLS Session Resumption in OpenVPN

2016-02-20 Thread Gert Doering
Hi, On Sat, Feb 20, 2016 at 11:40:28AM +0530, Shubham Chauhan wrote: > the --float option seems to be interesting! > > Help me understand one scenario. > If I want to transfer a VPN session from one VPN server to another, keeping > the same openvpn process running at the client side, then will th

Re: [Openvpn-devel] Enabling TLS Session Resumption in OpenVPN

2016-02-20 Thread Shubham Chauhan
the --float option seems to be interesting! Help me understand one scenario. If I want to transfer a VPN session from one VPN server to another, keeping the same openvpn process running at the client side, then will the "--float" option help? If not float, then is there any other method? We'll sur

Re: [Openvpn-devel] Enabling TLS Session Resumption in OpenVPN

2016-02-19 Thread Gert Doering
Hi, On Fri, Feb 19, 2016 at 07:02:21PM +0530, Shubham Chauhan wrote: > I am currently working on a project that requires SSL VPN to use session > resumptions. > > I need to add the TLS Session Resumption functionality to OpenVPN. Any > starters as in how I could achieve this? > I know about the S

Re: [Openvpn-devel] Enabling TLS Session Resumption in OpenVPN

2016-02-19 Thread Shubham Chauhan
Thank you for such a quick reply. I agree that VPN sessions and SSL sessions are not necessarily the same. Let me be more specific with my question for a better discussion. In an active OpenVPN session, at regular intervals, a full SSL handshake takes place (because the SSL session expires). I ch

Re: [Openvpn-devel] Enabling TLS Session Resumption in OpenVPN

2016-02-19 Thread Shubham Chauhan
Thanks. I didn't knew about this. This will be helpful. I am specifically looking for enabling TLS session resumptions though. Resuming the session with session IDs stored in a cache at server side (the general process of an abbreviated handshake). On Feb 19, 2016 7:50 PM, "Arne Schwabe" wrote:

Re: [Openvpn-devel] Enabling TLS Session Resumption in OpenVPN

2016-02-19 Thread Arne Schwabe
Am 19.02.16 um 15:00 schrieb Shubham Chauhan: > Thank you for such a quick reply. > > I agree that VPN sessions and SSL sessions are not necessarily the same. > Let me be more specific with my question for a better discussion. > > In an active OpenVPN session, at regular intervals, a full SSL >

Re: [Openvpn-devel] Enabling TLS Session Resumption in OpenVPN

2016-02-19 Thread Arne Schwabe
Am 19.02.16 um 14:32 schrieb Shubham Chauhan: > Hello, > > I am currently working on a project that requires SSL VPN to use > session resumptions. > > I need to add the TLS Session Resumption functionality to OpenVPN. Any > starters as in how I could achieve this? > I know about the SSL_OP_NO_TIC

[Openvpn-devel] Enabling TLS Session Resumption in OpenVPN

2016-02-19 Thread Shubham Chauhan
Hello, I am currently working on a project that requires SSL VPN to use session resumptions. I need to add the TLS Session Resumption functionality to OpenVPN. Any starters as in how I could achieve this? I know about the SSL_OP_NO_TICKET flag added to disable the resumption process. Will deletin