Very Computer

by **jaso** » Tue, 10 Jun 2003 16:07:43

according to ssl draft 3.0 (found out on
http://wp.netscape.com/eng/ssl3/draft302.txt), it seemly states that
the server would check its session cache with session id sent from
client side; if match is found, the server is willing to re-establish
the connection. does this mean that ssl can be cache?? or any resource
i appreciate any suggestions, sincerely.

by **Martin Coope** » Tue, 10 Jun 2003 16:27:13

> according to ssl draft 3.0 (found out on
> http://wp.netscape.com/eng/ssl3/draft302.txt), it seemly states that
> the server would check its session cache with session id sent from
> client side; if match is found, the server is willing to re-establish
> the connection. does this mean that ssl can be cache?? or any resource
> i appreciate any suggestions, sincerely.

Hi,
yes, an SSL session can be cached. According to the O'reilly book
'Network Security with Openssl' ISBN 0-596-00270-X, the main problem
with SSL is the amount of overhead involved in establishing the
connection in the first place. To cut down on this, session caching is
implemented, so as you say, the server and client will both look for the
cached session and if found, re-use the existing session. However,
remember that the sessions are only cached for a short period of time,
defaulting to 300 seconds in openssl.

--

Martin

Very Computer

cache ssl

cache ssl

cache ssl