Problem - Kevin Tafuro

that demonstrates the use of this flag in the book, but you can find one on
the book’s companion web site.
You can use the following convenience function to enable session caching on the
server side. If you want to use it with the SSLserver functions presented in Recipe 9.2,
you should create an SSL_CTX object using spc_create_sslctx( ) yourself. Then call
spc_enable_sessions( ) using that SSL_CTX object, and pass the SSL_CTX object to spc_
accept( ) so that a new one will not be created automatically for you. Whether you
enable session caching or not, it’s a good idea to create your own SSL_CTX object
before calling spc_accept( ) anyway, so that a fresh SSL_CTX object isn’t created for
each and every client connection.
#include
#include
void spc_enable_sessions(SSL_CTX *ctx, unsigned char *id, unsigned int id_len,
long timeout, int mode) {
SSL_CTX_set_session_id_context(ctx, id, id_len);
SSL_CTX_set_timeout(ctx, timeout);
SSL_CTX_set_session_cache_mode(ctx, mode);
}
Enabling session caching on the client side is even easier than it is on the server side.
All that’s required is setting the SSL_SESSION object in the SSL_CTX object before actually
establishing the connection. The following function, spc_reconnect( ), is a reimplementation
of spc_connect_ssl( ) with the necessary changes to enable clientside
session caching.
BIO *spc_reconnect(char *host, int port, SSL_SESSION *session,
spc_x509store_t *spc_store, SSL_CTX **ctx) {
BIO *conn = 0;
int our_ctx = 0;
SSL *ssl_ptr;
if (*ctx) {
CRYPTO_add(&((*ctx)->references), 1, CRYPTO_LOCK_SSL_CTX);
if (spc_store && spc_store != SSL_CTX_get_app_data(*ctx)) {
SSL_CTX_set_cert_store(*ctx, spc_create_x509store(spc_store));
SSL_CTX_set_app_data(*ctx, spc_store);
}
} else {
*ctx = spc_create_sslctx(spc_store);
our_ctx = 1;
}
if (!(conn = BIO_new_ssl_connect(*ctx))) goto error_exit;
BIO_set_conn_hostname(conn, host);
BIO_set_conn_int_port(conn, &port);
if (session) {
BIO_get_ssl(conn, &ssl_ptr);
SSL_set_session(ssl_ptr, session);
}
462 | Chapter 9: Networking
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.