Re: SSL Session reuse with SChannel (Windows)
- From: jabanes@xxxxxxxxxxx
- Date: Wed, 27 May 2009 22:45:04 -0700 (PDT)
On May 27, 7:54 am, DaveMo <david.mow...@xxxxxxxxx> wrote:
On May 25, 1:46 am, ju <juofl...@xxxxxxxxx> wrote:
Hello
I have a program that use schannel.dll to make a SSL connection to
remote server. But I'd like to disconnect from server often and
reconnect without the need to renegotiate shared key again. I know
that SSL support this, but don;t know how to make it with SChannel.
Here are some links that can help:
Creating a Secure Connection Using Schannel:http://msdn.microsoft.com/en-us/library/aa374782(VS.85).aspx
SSL session reuse - how to find if supported?:http://royontechnology.blogspot.com/2008/01/how-to-find-out-if-server...
I believe this is default behavior as long as you don't mess with the
flags in the SCHANNEL_CRED structure. Witness:
dwSessionLifespan
The number of milliseconds that Schannel keeps the session in its
session cache. After this time has passed, any new connections between
the client and the server require a new Schannel session. Set the
value of this member to zero to use the default value of 36000000
milliseconds (ten hours).
Banes will probably post something later telling me I'm wrong. He
loves doing that :)
HTH,
Dave
If you want reconnects to work it's important to use the same
credential handle for each connection. You'll also need to pass in the
same targetname string when calling InitializeSecurityContext. Pretty
much everything else is automatic.
Regards,
John
.
- Follow-Ups:
- References:
- SSL Session reuse with SChannel (Windows)
- From: ju
- Re: SSL Session reuse with SChannel (Windows)
- From: DaveMo
- SSL Session reuse with SChannel (Windows)
- Prev by Date: Re: Removal of inherited aces
- Next by Date: Re: Problem with AcquireCredentialsHandle (SCHANNEL) on Vista (and I assume 2008 server)
- Previous by thread: Re: SSL Session reuse with SChannel (Windows)
- Next by thread: Re: SSL Session reuse with SChannel (Windows)
- Index(es):
Relevant Pages
|