Using single EVP_PKEY instance across multiple connections

2014-06-27 Thread Barbe, Charles
Hi, I have an implementation of a multi-threaded HTTP server that I wrote using OpenSSL version 1.0.1g. Currently, on initialization of the server, I load my private key from disk and store it in an EVP_PKEY pointer. Whenever I accept a new connection, I use that same pointer to an EVP_PKEY in

RE: Using single EVP_PKEY instance across multiple connections

2014-06-29 Thread Barbe, Charles
single EVP_PKEY instance across multiple connections Hi, I have an implementation of a multi-threaded HTTP server that I wrote using OpenSSL version 1.0.1g. Currently, on initialization of the server, I load my private key from disk and store it in an EVP_PKEY pointer. Whenever I accept a new

Re: Using single EVP_PKEY instance across multiple connections

2014-06-29 Thread Dr. Stephen Henson
On Sun, Jun 29, 2014, Barbe, Charles wrote: > To expand on this question a little more, is it safe to just create one > SSL_CTX* at initialization of my server that will be used each time a new > client connects when i do SSL_new(ctx)? > Yes it is. That's how most servers are written. Steve. --

RE: Using single EVP_PKEY instance across multiple connections

2014-06-29 Thread Salz, Rich
> To expand on this question a little more, is it safe to just create one > SSL_CTX* > at initialization of my server that will be used each time a new client > connects > when i do SSL_new(ctx)? Yes. -- Principal Security Engineer Akamai Technologies, Cambridge, MA IM: rs...@jabber.me; Twitt

Re: Using single EVP_PKEY instance across multiple connections

2014-06-29 Thread Jeffrey Walton
On Sun, Jun 29, 2014 at 1:58 PM, Barbe, Charles wrote: > To expand on this question a little more, is it safe to just create one > SSL_CTX* at initialization of my server that will be used each time a new > client connects when i do SSL_new(ctx)? > Yes. __