Problem - Kevin Tafuro

if (our_ctx) *ctx = 0;
return 0;
}
When a new socket connection is accepted, SSL_accept( ) is called to perform the
SSLhandshake. The server’s certificate (and possibly its chain, depending on how
you configure the spc_x509store_t object) is sent to the peer, and if a client certificate
is requested and received, it will be verified. If the handshake is successful, the
returned BIO object behaves exactly the same as the BIO object that is returned by
spc_connect( ) or spc_connect_ssl( ). Regardless of whether a new connection was
successfully established, the listening BIO object passed into SSL_accept( ) will be
ready for another call to SSL_accept( ) to accept the next connection.
See Also
Recipes 9.1, 10.5
9.3 Using Session Caching to Make SSL Servers
More Efficient
Problem
You have a client and server pair that speak SSLto each other. The same client often
makes several connections to the same server in a short period of time. You need a
way to speed up the process of the client’s reconnecting to the server without sacrificing
security.
Solution
The terms SSL session and SSL connection are often confused or used interchangeably,
but they are, in fact, two different things. An SSLsession refers to the set of
parameters and encryption keys created by performing an SSLhandshake. An SSL
connection is an active conversation between two peers that uses an SSLsession.
Normally, when an SSLconnection is established, the handshake process negotiates
the parameters that become a session. It is this negotiation that causes establishment
of SSL connections to be such an expensive operation.
Luckily, it is possible to cache sessions. Once a client has connected to the server and
successfully completed the normal handshake process, both the client and the server
can save the session parameters so that the next time the client connects to the
server, it can simply reuse the session, thus avoiding the overhead of negotiating new
parameters and encryption keys.
460 | Chapter 9: Networking
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.