Re: SSL Session reuse with SChannel (Windows)



On May 25, 1:46 am, ju <juofl...@xxxxxxxxx> wrote:
Hello

I have a program that use schannel.dll to make a SSL connection to
remote server. But I'd like to disconnect from server often and
reconnect without the need to renegotiate shared key again. I know
that SSL support this, but don;t know how to make it with SChannel.

Here are some links that can help:

Creating a Secure Connection Using Schannel:http://msdn.microsoft.com/en-us/library/aa374782(VS.85).aspx

SSL session reuse - how to find if supported?:http://royontechnology.blogspot.com/2008/01/how-to-find-out-if-server...

I believe this is default behavior as long as you don't mess with the
flags in the SCHANNEL_CRED structure. Witness:

dwSessionLifespan
The number of milliseconds that Schannel keeps the session in its
session cache. After this time has passed, any new connections between
the client and the server require a new Schannel session. Set the
value of this member to zero to use the default value of 36000000
milliseconds (ten hours).

Banes will probably post something later telling me I'm wrong. He
loves doing that :)

HTH,
Dave
.



Relevant Pages

  • Re: RWW Timing
    ... I understand that you want to monitor when and how ... > to an internal Windows XP or Terminal Server computer. ... SBS creates a connection to the internal client on port 3389 which is ... But it can not tell which one session from the RWW, ...
    (microsoft.public.windows.server.sbs)
  • SSL and IPS (was RE: ssh and ids)
    ... How many simultaneous SSL sessions can be tracked?" ... I assume you're talking about a case in which the client constantly ... If you walk the possible session id space and ... The server chooses the session ID, ...
    (Focus-IDS)
  • Re: [Full-Disclosure] idea (quite a bit off-topic, but....)
    ... it is functionally equivilent to just opening a single connection. ... with the symmetric key you got from the server, and send it UDP to a fixed ... After a random number of packets, reconnect with ssl, assert the unique id ...
    (Full-Disclosure)
  • Re: Remote Desktop Disconnected, protocol error
    ... You can not establish a Remote Desktop session to a computer ... The Terminal Server session creation failed. ... make a connection from the server to itself. ...
    (microsoft.public.windows.terminal_services)
  • RE: OS X RDC client does not support Session Directories (read)
    ... When you make the initial connection (whether you have an existing session ... the server attempting to map sound, ... This must be the "command packet" that is telling the client to ...
    (microsoft.public.windows.terminal_services)

Loading