Re: relayd TLS session caching

2016-08-08 Thread Claudio Jeker
On Tue, Jul 19, 2016 at 03:32:13PM +0200, Claudio Jeker wrote: > At the moment relayd's TLS session caching is a bit busted because > the multiple relay processes do not share state. > The following diff adds SSL session caching and sharing of the TLS ticket > secrets. Which this openssl s_client -

Re: relayd TLS session caching

2016-07-19 Thread Philip Guenther
On Tue, 19 Jul 2016, Sebastian Benoit wrote: > maybe session cache disable should disable tickets too. Well, what problem are you trying to solve by offering that option? If it's to save memory, because original-flavor session caching requires state and overhead on the server, then you should on

Re: relayd TLS session caching

2016-07-19 Thread Sebastian Benoit
maybe session cache disable should disable tickets too. some little things below, otherwise ok Claudio Jeker(cje...@diehard.n-r-g.com) on 2016.07.19 15:32:13 +0200: > At the moment relayd's TLS session caching is a bit busted because > the multiple relay processes do not share state. > The follow

relayd TLS session caching

2016-07-19 Thread Claudio Jeker
At the moment relayd's TLS session caching is a bit busted because the multiple relay processes do not share state. The following diff adds SSL session caching and sharing of the TLS ticket secrets. Which this openssl s_client -connect W.X.Y.Z:443 -reconnect reuses the connection after the first on