Bodo Moeller <[EMAIL PROTECTED]> writes:
> On Tue, Sep 14, 1999 at 12:22:56PM -0700, [EMAIL PROTECTED] wrote:
>
> [...]
> > This is all theory at this point, but it seems as though there is a problem
> > with SSL_set_timeout(...) (or my use of it).
>
> What functions and macros do you use? Usually you should not need
> SSL_set_timeout; what you need is SSL_CTX_set_timeout on the SSL_CTX
> before any sessions are created. SSL_set_timeout on an SSL_SESSION
> does not affect the copy of that session that may be in an external
> cache.
A bastardized mod_ssl 2.1.3.
ssl = ap_ctx_get(c->client->ctx, "ssl");
if (ssl == NULL)
return 0;
session = SSL_get_session(ssl);
if (session == NULL)
return 0;
/*
* Set the timeout also for the internal SSLeay cache, because this way
* our inter-process cache is consulted only when it's really necessary.
*/
sc = mySrvConfig(mc->rCtx.pConn->server);
t = SSL_get_time(session) + sc->nSessionCacheTimeout;
SSL_set_timeout(session, t);
In my case, I'd like to be able to re-set the session timeout so I can
extend the lifetime of a session.
-Tom
--
Tom Vaughan <tvaughan at aventail dot com>
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]