On 4 Oct 2016, at 15:47, Paul Spangler <paul.spang...@ni.com> wrote: > From my understanding, apr_crypto_key_t is an opaque struct defined > separately by each crypto provider, so mod_session_crypto will not be able to > do the sizeof.
That's a sizeof a pointer to apr_crypto_key_t, not the sizeof apr_crypto_key_t itself. Keys are read at server start and reused. Trying to regenerate the key on every request has performance implications. Regards, Graham --