Re: How does SSL session resumption work

From: Michael Schmidt (NOSPAM_schmidt_at_nue.et-inf.uni-siegen.de)
Date: 05/28/05

  • Next message: Colin Andrew Percival: "Re: Matrix-Multiplication: Security?" 
    Date: Sat, 28 May 2005 10:07:36 +0200

    Michael Schmidt schrieb:
    > Kumar Mettu schrieb:
    >
    >>Hi,
    >>
    >> I am trying to find some good read on SSL session resumption and
    >>couldn't find any good resource. Any help?
    >>
    >> I am planning to support session resumption on our server side and
    >>client are mobile devices whose IP changes everytime they start a data
    >>session. I want to set SSL session persistance something like 24hrs.
    >>
    >>Thanks In Advance,
    >>Kumar.
    >
    >
    > Hi,
    >
    > There's the book "SSL and TLS, Designing and Building Secure Systems" by
    > Eric Rescorla, Addison Wesley, ISBN 0-201-61598-3, which explains the
    > topic quite well.
    >
    > Other than that, you may want to take a look at the SSL module
    > documentation of the 'Apache' web server. The module is called
    > 'mod_ssl', and implements SSL session resumption.
    >
    >
    > Michael

    Eric Rescorla addresses SSL session resumption in an article in the
    online 'Linux Journal':

    http://www.linuxjournal.com/article/5487

    I think this is basically what you need.

    Michael 

    -- 
Michael Schmidt
University of Siegen, Germany
http:   www.dcs.uni-siegen.de
e-mail: schmidt _at_ nue.et-inf.uni-siegen.de
  • Next message: Colin Andrew Percival: "Re: Matrix-Multiplication: Security?"