Bodo Moeller <[EMAIL PROTECTED]> writes:

> On Tue, Sep 14, 1999 at 12:22:56PM -0700, [EMAIL PROTECTED] wrote:
> 
> [...]
> > This is all theory at this point, but it seems as though there is a problem
> > with SSL_set_timeout(...) (or my use of it).
> 
> What functions and macros do you use?  Usually you should not need
> SSL_set_timeout; what you need is SSL_CTX_set_timeout on the SSL_CTX
> before any sessions are created.  SSL_set_timeout on an SSL_SESSION
> does not affect the copy of that session that may be in an external
> cache.

A bastardized mod_ssl 2.1.3.

    ssl = ap_ctx_get(c->client->ctx, "ssl");
    if (ssl == NULL)
        return 0;

    session = SSL_get_session(ssl);
    if (session == NULL)
        return 0;

    /*
     * Set the timeout also for the internal SSLeay cache, because this way
     * our inter-process cache is consulted only when it's really necessary.
     */
    sc = mySrvConfig(mc->rCtx.pConn->server);
    t = SSL_get_time(session) + sc->nSessionCacheTimeout;
    SSL_set_timeout(session, t);

In my case, I'd like to be able to re-set the session timeout so I can
extend the lifetime of a session.

-Tom

-- 
Tom Vaughan <tvaughan at aventail dot com>
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to