Hello,

I've noticed that the session re-use doesn't work if I turn on client
authentication in my SSL server, in openssl 0.9.2b. I have set the
SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE flags when I register my
callback function with SSL_CTX_set_verify(). This same behaviour is
found both in ssl23 and ssl3 modes. A full SSL negotiation is performed
each time my client connects. If I turn off client authentication the
session cache works as intended.

I'm using Windows NT.


--
Roger



______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to