Contract of d2i_SSL_SESSION ?

Jesper Pedersen jesper.pedersen at redhat.com
Thu Dec 16 12:06:26 UTC 2021


Hi Matt,

On 12/16/21 07:01, Matt Caswell wrote:
>> So, having the i2d_SSL_SESSION of a previous client being used by a 
>> new client through SSL_set_session against the same server side 
>> connection isn't being considered a resume ?
> 
> No. The SSL_SESSION object only encapsulates the state required for a 
> resumption handshake. It does *not* encapsulate the state required for a 
> currently active connection. There is much more state required than that 
> and it is held in the SSL object.
> 

Ah, ok. Bummer.

Thanks for all your help !

Best regards,
  Jesper




More information about the openssl-users mailing list