Netscape and IE both cache sessions and the server you are writing
should as well. I believe most sane browsers would do the same.
Unless you are writing your own client, you really don't have to worry
about client-side caching.
Let's say your server caches sessions. If the browser doesn't re-use
a session, the entire handshake would be repeated for every connection.
OpenSSL library will take care of that for you.
I am developing a server on NT which has a threaded model and the
function calls I outlined in my previous reply are all I need to
enable session caching. Actually even the linux port using pthreads
library works fine.
There are calls like SSL_set_session_id_context. Looking at the source
I've understood that they provide an additional check-point where
even context for re-use (context could be anything you choose) is
compared with the one set earlier. I'm not sure how to use this
feature. If anybody could enlighten me on the use of this call,
it would be great.
Regards,
Amit.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
