On Tue, Jun 22, 1999 at 06:23:09PM +0200, Oliver Floericke wrote:

> I'm would like to convince OpenSSL to cache the session ID's but how can I
> achive this?
> 
> I have a Client that sends him his SessionId which OpenSSL should already
> have, but the answer from OpenSSL is that it do not want to resume an old
> session. At last this is what the debug from my client (IAIK) tells me...
> 
> Now I have the following questions:
> 
> a) Is Id caching active as a default ?

Each SSL_CTX has its own session cache which is enabled by default.
There is no session cache across SSL_CTX's unless you add your own
external session cache.  If you use client authentication, then you
must set a session context (using SSL_CTX_set_session_id_context);
this is so that an external cache that is used for multiple contexts
and fails to look at the SSL_CTX's of the individual sessions can
mix them without doing harm.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to