> On Mar 2, 2018, at 12:44 AM, Viktor Dukhovni <openssl-us...@dukhovni.org> 
> wrote:
> 
>> On Mar 1, 2018, at 10:39 PM, Felipe Gasper <fel...@felipegasper.com> wrote:
>> 
>> Hi all,
>> 
>>      I’ve got a project where I’m trying to send a Hello Request from the 
>> server immediately before an exec(), then renegotiate the SSL connection.
>> 
>>      What is the easiest way to send *just* a Hello Request from a server?
> 
> You actually have a more severe problem.  The session is already established
> and so the renegotiation must happen over an already encrypted channel.  But
> there's no API to export the cryptographic state for use in the new 
> executable.
> 
> I believe you're out of luck.  I believe that OpenSSL does not support 
> migration
> of live connections between address spaces.

Doh!

Eh well. Thank you for clarifying.

-Felipe
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Reply via email to