Skip to content

NetSSL_OpenSSL: Support session resumption with TLSv1.3 #3880

@obiltschnig

Description

@obiltschnig

Some changes are required in NetSSL_OpenSSL to support session resumption with TLSv1.3.

Ideally, the code should be updated to use SSL_CTX_sess_set_new_cb().
If that is not feasible, a call to SSL_get1_session() after a successful two-way shutdown may give a resumable session. There should also be a way to check whether a session is resumable, by wrapping SSL_SESSION_is_resumable().

See https://wiki.openssl.org/index.php/TLS1.3#Sessions for a detailed explanation.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions