I was mistaken in my original post. Server-side session caching is implemented, it's client session resumption that hasn't been fleshed out yet.
On Wed, Feb 29, 2012 at 23:50, Paul Querna <p...@querna.org> wrote: > I was unable to reproduce the issue with Session resumption. From > everyone I can tell, Node.js is setting the right options for OpenSSL > to use its built in SSL Session cache, which has a default limit of > 20,000 entries. > > You can test this by running: > > openssl s_client -connect 127.0.0.1:8443 -reconnect > > And looking at the values of the Session-ID line. It's odd, `openssl s_client -prexit -reconnect` reports that the session is reused even when the server sets SSL_SESS_CACHE_OFF...