search

vincentbernat / rfc5077

Various tools for testing RFC 5077
https://vincent.bernat.ch/en/blog/2011-ssl-session-reuse-rfc5077
239 stars 56 forks source link

few extra features #3

Closed grooverdan closed 11 years ago

grooverdan commented 11 years ago

like delays between negotiations that was really handle debugging timeouts.

Client certificate support to make sure that these were being stored.

This tool helped me finish of nginx tickets: http://trac.nginx.org/nginx/ticket/120

This also enabled me to discover that the client support of all three libraries is broken with respect to rfc5077 3.4 paragraph 2 where servers can redo a ticket. Sigh, more bug reports.

Much appreciated.

I've also got a bit more in my detailed-session-info branch which has openssl-client callbacks to display messages but its currently a bit ugly.

vincentbernat commented 11 years ago

Congrats for the patch for nginx. I am happy that you have found this tool useful.