Re: symmetric aes key

2013-12-06 Thread Sebastian Biedermann
Works perfect, thank you!!! Am 06.12.2013 12:21, schrieb Yann Ylavic: > Maybe the patch below can help. > > Disclaimer: this is just a POC, it is not thread safe (a single file > is used)!!! > You'll have to adjust that to your needs. > > SSL_SESSION_print will write all the session infos (includi

Re: symmetric aes key

2013-12-06 Thread Yann Ylavic
Maybe the patch below can help. Disclaimer: this is just a POC, it is not thread safe (a single file is used)!!! You'll have to adjust that to your needs. SSL_SESSION_print will write all the session infos (including the master key) to the file. If you need the master key only, you could use sess

symmetric aes key

2013-12-06 Thread Sebastian Biedermann
Dear developers, I work on a research project about SSL security. Currently, I'm trying to identify and write the negotiated symmetric AES key of a session to a file just by modifying the apache2-2.4.6 source code. Until now, I was not able to identify and locate the variable which temporary store

Re: mod_proxy, oooled backend connections and the keep-alive race condition

2013-12-06 Thread Yann Ylavic
I don't want to overdo this thread (apologies if it is already), last comment yet... On Thu, Dec 5, 2013 at 10:03 PM, Yann Ylavic wrote: > Is sending a partial request first what you'd like to (be) implement(ed), > and only if that succeeds send the remaining data? > The issue would still be th