Serializing SSL state

Rouzier, James jarouzie at akamai.com
Mon Jun 20 21:29:48 UTC 2022


Hi Matt,

What would it take to expose this?
Also would you accept a patch if we implement what’s missing?

Thank You
James

On 6/20/22, 10:13 AM, "Matt Caswell" <matt at openssl.org> wrote:



    On 20/06/2022 15:11, Rouzier, James via openssl-users wrote:
    > Hey Guys,
    > 
    > Is it possible to serialize/deserialize an ongoing TLS session in any way?
    > 
    > We are trying to create a stateless RADIUS server.
    > Where we place multiple RADIUS servers behind a UDP loader balancer.
    > Each part of EAP-TLS process could hit a different server.
    > The plan is to save the current state of the TLS handshake so that any 
    > server can pickup where the previous server left off.
    > Is this possible with the current API of openssl?

    No. This currently not possible.

    Matt




More information about the openssl-users mailing list