Re: RFC: extracting the mod_ssl session cache interface

2008-02-26 Thread Issac Goldstand
Justin Erenkrantz wrote: On Mon, Feb 25, 2008 at 2:12 PM, Joe Orton [EMAIL PROTECTED] wrote: The session cache interface in mod_ssl on the trunk is now mostly SSL- and mod_ssl-agnostic with respect to the data storage and configuration. There is still some tight coupling between the

Re: RFC: extracting the mod_ssl session cache interface

2008-02-26 Thread Matthieu Estrade
Joe Orton wrote: The session cache interface in mod_ssl on the trunk is now mostly SSL- and mod_ssl-agnostic with respect to the data storage and configuration. There is still some tight coupling between the session cache and the ssl_mutex interface, but that's next on my hit list. Is there

Re: RFC: extracting the mod_ssl session cache interface

2008-02-26 Thread Joe Orton
On Mon, Feb 25, 2008 at 05:26:08PM -0800, Paul Querna wrote: how did you want to structure keys? Interesting question. I envisage this working by having consumers configure and set up independent cache instances; so if you had mod_auth_digest and mod_ssl both using a shmcb provider, you'd get

Re: RFC: extracting the mod_ssl session cache interface

2008-02-26 Thread Jim Jagielski
On Feb 25, 2008, at 5:12 PM, Joe Orton wrote: The session cache interface in mod_ssl on the trunk is now mostly SSL- and mod_ssl-agnostic with respect to the data storage and configuration. There is still some tight coupling between the session cache and the ssl_mutex interface, but that's

Re: RFC: extracting the mod_ssl session cache interface

2008-02-26 Thread Joe Orton
On Mon, Feb 25, 2008 at 10:54:58PM +, Dr Stephen Henson wrote: Well I can think of a several applications for de-SSL-ifying or specifically de-SSL_SESSION-ifying (i.e. being able to store things other than SSL_SESSION) the code straight off. Both SSL related. The OCSP stapling patch

Re: RFC: extracting the mod_ssl session cache interface

2008-02-26 Thread Dr Stephen Henson
Joe Orton wrote: On Mon, Feb 25, 2008 at 10:54:58PM +, Dr Stephen Henson wrote: If it could hold (potentially) larger objects or large numbers of small objects then it could help make the CRL code more usable. I'm not sure exactly what you're referring to there (caching CRL lookup

RFC: extracting the mod_ssl session cache interface

2008-02-25 Thread Joe Orton
The session cache interface in mod_ssl on the trunk is now mostly SSL- and mod_ssl-agnostic with respect to the data storage and configuration. There is still some tight coupling between the session cache and the ssl_mutex interface, but that's next on my hit list. Is there any interest in

Re: RFC: extracting the mod_ssl session cache interface

2008-02-25 Thread Ruediger Pluem
On 02/25/2008 11:12 PM, Joe Orton wrote: The session cache interface in mod_ssl on the trunk is now mostly SSL- and mod_ssl-agnostic with respect to the data storage and configuration. There is still some tight coupling between the session cache and the ssl_mutex interface, but that's next

Re: RFC: extracting the mod_ssl session cache interface

2008-02-25 Thread Dr Stephen Henson
Joe Orton wrote: The session cache interface in mod_ssl on the trunk is now mostly SSL- and mod_ssl-agnostic with respect to the data storage and configuration. There is still some tight coupling between the session cache and the ssl_mutex interface, but that's next on my hit list. Is there

Re: RFC: extracting the mod_ssl session cache interface

2008-02-25 Thread Justin Erenkrantz
On Mon, Feb 25, 2008 at 2:12 PM, Joe Orton [EMAIL PROTECTED] wrote: The session cache interface in mod_ssl on the trunk is now mostly SSL- and mod_ssl-agnostic with respect to the data storage and configuration. There is still some tight coupling between the session cache and the ssl_mutex

Re: RFC: extracting the mod_ssl session cache interface

2008-02-25 Thread Paul Querna
Joe Orton wrote: The session cache interface in mod_ssl on the trunk is now mostly SSL- and mod_ssl-agnostic with respect to the data storage and configuration. There is still some tight coupling between the session cache and the ssl_mutex interface, but that's next on my hit list. Is there