Is it possible to perform the shortened (session resumption) handshake without reconnecting the socket? TLS 1.2 RFC 5246 states:

[ClientHello]
The session identifier MAY be from an earlier connection, this connection, or from another currently active connection. The second option is useful if the client only wishes to update the random structures and derived values of a connection, and the third option makes it possible to establish several independent secure connections without repeating the full handshake protocol.

So it should be possible, but the only handshake related functions I have found in OpenSSL are SSL_renegotiate and SSL_get_session/ SSL_set_session. The first always performs a full handshake and the latter requires a new SSL object.

Regards,
Robin
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to