Re: disable session id reuse

[Devang Kubavat <digant.kubavat@xxxxxxxxx>]

Hi Darshan, 

In Addition, Make sure that you should disable the session ticket based session resumption using SSL_OP_NO_TICKET. 

By default SSL_OP_NO_TICKET is not disabled. 

Thanks

Devang

Sent from my iPhone

On 03-May-2018, at 2:12 PM, Mody, Darshan (Darshan) <darshanmody@xxxxxxxxx> wrote:

Hi,

 

While doing a openssl s_time command I find that by default it tries for Session Id Reuse. “Now timing with session id reuse.”

 

In case if we don’t want openssl to reuse session id’s how can we configure openssl in the application for the same.

 

The application here is acting as a server.

 

I have set  SSL_CTX_set_session_cache_mode to SSL_SESS_CACHE_OFF

 

Thanks

Darshan

--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users