cURL / Mailing Lists / curl-users / Single Mail

curl-users

RE: Question regarding using the ssl sessionid usage

From: Niranjan Ramakrishnan <willowbreaker_at_hotmail.com>
Date: Wed, 1 Apr 2009 10:33:31 -0700

> Date: Tue, 31 Mar 2009 11:19:59 +0200
> From: daniel_at_haxx.se
> To: curl-users_at_cool.haxx.se
> Subject: Re: Question regarding using the ssl sessionid usage
>
> On Tue, 31 Mar 2009, Niranjan Ramakrishnan wrote:
>
> > curl --verbose -sessionid -k -1 -2 -3 https://URLPATH https://URLPATH
>
> "-sessionid" is not the same as "--sessionid" which probably is what you
> want.
>
> Then, --sessionid only works with 7.19.0 or later but is already the default
> behavior so in most situations you won't need to use it.
>
> > When I do a tcpdump for this and look at the traffic , I do not see the
> > sessionid being reused. What is the way to reuse ssl session id.
>
> curl uses libcurl which primarily reuses the entire connection and only if the
> connection gets closed it attempts to re-use the sessionid in the next SSL
> handshake.
>
> If you think you see a case where it doesn't re-use the SSL sessionid where it
> should, it could be a possible bug. Can you provide us with a command line
> against a public URL that shows this? And also tell us what curl version on
> what OS you're using.

Following are the details of the request ( OS , curl version )
CURL

/usr/local/bin/curl --version
curl 7.19.4 (i686-pc-linux-gnu) libcurl/7.19.4 OpenSSL/0.9.8b zlib/1.2.3
Protocols: tftp ftp telnet dict ldap http file https ftps
Features: IPv6 Largefile NTLM SSL libz

OS

CentOS release 5 (Final)
Kernel \r on an \m

REQUEST

/usr/local/bin/curl --verbose -k --url https://www.google.com - In the ClientHello , I see sessionid length as 0 - As expected.

The ServerHello sends a sessionid

I resend the request

/usr/local/bin/curl --verbose -k --url https://www.google.com - In the ClientHello , I see sessionid length as 0 - I would expect it to reuse the sessionid that was sent previously.

Please let me know if I am doing something wrong.

>
> --
> Daniel
> -------------------------------------------------------------------
> List admin: http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-users
> FAQ: http://curl.haxx.se/docs/faq.html
> Etiquette: http://curl.haxx.se/mail/etiquette.html

_________________________________________________________________
Rediscover HotmailŪ: Get quick friend updates right in your inbox.
http://windowslive.com/RediscoverHotmail?ocid=TXT_TAGLM_WL_HM_Rediscover_Updates1_042009

-------------------------------------------------------------------
List admin: http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-users
FAQ: http://curl.haxx.se/docs/faq.html
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2009-04-01