[openssl-users] Two sessions in a single full handshake
bkaduk at akamai.com
Sun Sep 30 03:46:45 UTC 2018
s_client has -sess_out and -sess_in options that can be used
to save session information to a file and read it in for a subsequent
connection. Neither is used by default.
On Sun, Sep 30, 2018 at 11:06:14AM +0800, John Jiang wrote:
> Does s_client resume any session in the local session file?
> On Sun, Sep 30, 2018 at 3:19 AM Salz, Rich via openssl-users <
> openssl-users at openssl.org> wrote:
> > - The debug logs display two "SSL-Session" blocks in a full handshake.
> > Only one "SSL-Session" block is displayed in a resumption.
> > Why does full handshake has two sessions?
> > This is part of the TLS 1.3 standard. A server can send back multiple
> > sessions, so that a client may resume with a different session, and
> > therefore prevent an observer from “linking” two different activities.
> > --
> > openssl-users mailing list
> > To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
More information about the openssl-users