Re: [openssl-users] Session Ticket Support in Openssl TLS 1.2

2017-06-16 Thread Neetish Pathak
Benjamin/Matt, Appreciate your tips and help so far. Could you give me any pointers for placing my timestamps within the OpenSSl code for right measurement for handshake. I am reading through the master code. I think since in TLS 1.3 is session tickets are sent after handshake, it would be ok to pl

Re: [openssl-users] Session Ticket Support in Openssl TLS 1.2

2017-06-16 Thread Benjamin Kaduk via openssl-users
On 06/16/2017 05:36 PM, Matt Caswell wrote: >> The security properties of such "external" PSKs are substantially >> different than the "ephemeral" PSKs used in resumption flows. > Ben - Even external PSKs incorporate an ephemeral, per connection, ECDHE > based secret (assuming a suitable kex_mode i

Re: [openssl-users] Session Ticket Support in Openssl TLS 1.2

2017-06-16 Thread Neetish Pathak
Thanks Matt, Appreciate ur response and tips On Fri, Jun 16, 2017 at 3:36 PM, Matt Caswell wrote: > > > On 16/06/17 20:08, Benjamin Kaduk via openssl-users wrote: > > On 06/16/2017 01:58 PM, Neetish Pathak wrote: > >> Hello > >> Thanks > >> I tried reading some content from the server side and

Re: [openssl-users] Session Ticket Support in Openssl TLS 1.2

2017-06-16 Thread Matt Caswell
On 16/06/17 20:08, Benjamin Kaduk via openssl-users wrote: > On 06/16/2017 01:58 PM, Neetish Pathak wrote: >> Hello >> Thanks >> I tried reading some content from the server side and I observed the >> new_session_cb getting invoked in that case on the client side. I >> understand that may be du

Re: [openssl-users] Session Ticket Support in Openssl TLS 1.2

2017-06-16 Thread Benjamin Kaduk via openssl-users
On 06/16/2017 01:58 PM, Neetish Pathak wrote: > Hello > Thanks > I tried reading some content from the server side and I observed the > new_session_cb getting invoked in that case on the client side. I > understand that may be due to delayed NewSession info transfer from > server side to client s

Re: [openssl-users] Session Ticket Support in Openssl TLS 1.2

2017-06-16 Thread Neetish Pathak
Hello Thanks I tried reading some content from the server side and I observed the new_session_cb getting invoked in that case on the client side. I understand that may be due to delayed NewSession info transfer from server side to client side. But it is helpful for saving the session info on the c