Re: [openssl-users] OpenSSL - Session Resumption on an On-going Connection

2018-11-22 Thread Matt Caswell
On 22/11/2018 11:15, Filipe Fernandes wrote: >>   You seem to be confused, and have not explained your requirements >>   clearly.  What is your *goal*? > > My goal is to have the Openssl to "perform the TLS Resumption (initiated by > the > Hello Request message from the server or > the Client

Re: [openssl-users] OpenSSL - Session Resumption on an On-going Connection

2018-11-22 Thread Filipe Fernandes
> I thought you wanted renegotiation, not resumption, servers can't > do "resumption", because resumption is what you do to avoid a full > handshake on a *new* connection, and only the client can reconnect. Ok. Agreed. > You seem to be confused, and have not explained your requirements >

Re: [openssl-users] OpenSSL - Session Resumption on an On-going Connection

2018-11-21 Thread Viktor Dukhovni
On Wed, Nov 21, 2018 at 05:45:19PM +, Filipe Fernandes wrote: > I've followed your example, and it looks like the server is doing what it's > supposed to, however, I'm getting a disconnect from the server when the > session expires. Which should not happen, and I can't seem to find a reason >

Re: [openssl-users] OpenSSL - Session Resumption on an On-going Connection

2018-11-21 Thread Filipe Fernandes
I've misjudged. The socket is closed even if the session has not ended (I've set the session timeout to 10 times the resumption cycle). You can check the tcpdump here: https://imgfly.me/i/66LJY I'm doing exactly what is on the s_server example, without avail. if

Re: [openssl-users] OpenSSL - Session Resumption on an On-going Connection

2018-11-21 Thread Filipe Fernandes
Hi Viktor, I've followed your example, and it looks like the server is doing what it's supposed to, however, I'm getting a disconnect from the server when the session expires. Which should not happen, and I can't seem to find a reason for this to be happening. As previously said, I'm developing

Re: [openssl-users] OpenSSL - Session Resumption on an On-going Connection

2018-11-19 Thread Viktor Dukhovni
On Mon, Nov 19, 2018 at 04:01:35PM +, Filipe Fernandes wrote: > I'm developing a specific SSL Server, in which it's supposed to have an > always-on socket connection. So, to be on the safe side, there's specific > needs that need to be filled on this implementation. One of the needs is > that

Re: [openssl-users] OpenSSL - Session Resumption on an On-going Connection

2018-11-19 Thread Salz, Rich via openssl-users
>My question: How can I make LibOpenSSL-1.0.2g to send a ServerHello to the >Client on demand? The socket should not close, nor perform a renegotiation. You have to shutdown and restart the TLS layer. You cannot send arbitrary ServerHello messages, it’s a protocol violation. --

[openssl-users] OpenSSL - Session Resumption on an On-going Connection

2018-11-19 Thread Filipe Fernandes
I'm developing a specific SSL Server, in which it's supposed to have an always-on socket connection. So, to be on the safe side, there's specific needs that need to be filled on this implementation. One of the needs is that the server must send a resumption request (ServerHello) to the client on a