Contract of d2i_SSL_SESSION ?

Matt Caswell matt at openssl.org
Thu Dec 16 15:18:46 UTC 2021



On 16/12/2021 15:13, Jeremy Harris wrote:
> On 16/12/2021 11:48, Matt Caswell wrote:
>> What you are describing is not a resumption. A TLS resumption has a 
>> specific meaning. It involves both a client and a server creating a 
>> new connection based on an abbreviated handshake using parameters from 
>> a previous handshake.
> 
> Clarification request: "connection" above is specifically "TLS connection",
> or the combination of TLS connection and TCP (or other transport) 
> connection?
> 
> If the former, and if it is legitimate to carry on using the transport
> connection after the close of a TLS connection (including starting a new
> TLS connection) - then, modulo passing the socket for the TLS-less 
> transport
> connection between the OP's processess, what he wanted seems partly viable.

I specifically mean TLS Connection. It is legitimate to carry on using 
the transport connection after the close of TLS - as long as you have 
cleanly closed down the TLS connection.

Matt


More information about the openssl-users mailing list