rfc5077 | Various tools for testing RFC | Testing library
kandi X-RAY | rfc5077 Summary
kandi X-RAY | rfc5077 Summary
[RFC 5077] is a session resumption mechanism for TLS without server-side state. You’ll find here various tools related to testing availability of RFC 5077. This mechanism is an extension for TLS. If a client or a server does not support TLS, it does not support RFC 5077.
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of rfc5077
rfc5077 Key Features
rfc5077 Examples and Code Snippets
Community Discussions
Trending Discussions on rfc5077
QUESTION
I must use the RFC5077 TLS session resumption. My Client use Windows SChannel and server usually uses OpenSSL. In my test, following result.
- OpenSSL 1.1.0 (or later) and SChannel: Always session reused, SChannel send previous Session Ticket.
- OpenSSL 1.0.2 (any revision) and Schannel: Always new session, SChannel does not send Session Ticket.
- OpenSSL and OpenSSL: Always session reused.
So I want to know that
- Why Schannel don't use TLS session resumption only for OpenSSL 1.0.2?
- The difference between 1.0.2 and 1.1.0.
- How to use TLS session resumption at OpenSSL 1.0.2 and SChannel?
Server code: Simple TLS Server
Client code: Windows C++
...ANSWER
Answered 2019-Nov-16 at 03:21At Windows Update 2019/10, RFC7627 Extended Master Secret was enabled. SChannel requires RFC7627 EMS support when RFC5077 TLS Session Resumption.
OpenSSL suport RFC7627 extended master secret from 1.1.0. So SChannel cannot reuse TLS session with OpenSSL 1.0.2.
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install rfc5077
git submodule init
git submodule update
git checkout openssl-1.0
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page