[PROTON-136] Add support for SSL session resumption

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: proton-0.3
• Fix Version/s: proton-0.3
• Component/s: proton-c
• Labels: ssl sslContext sslresume
• Assignee: Phil Harvey
• Reporter: Affan Dar
• Created: 14/Nov/12 19:40
• Updated: 02/May/13 02:29
• Resolved: 18/Dec/12 20:37

Description

Open SSL supports resumption of SSL sessions which by-pass the heavy SSL handshake process. This is critical for scenarios involving low powered devices especially on cellular data networks where bandwidth is precious.

It would be great if Proton exposes this ssl resume feature to users. .

From: rhs [e-mail]
Sent: Tuesday, November 13, 2012 11:34 AM
To: Affan Dar
Cc: David Ingham
Subject: Re: SSL session resumption

On Tue, Nov 13, 2012 at 8:05 PM, Affan Dar <[e-mail]> wrote:
>>Serializing/restoring the whole session state for the messenger will work for the scenario I think.

Ok, let's start with this step then. I'm open to providing something finer grained if there is a need, but my preference is to keep it simple for the moment.

>>One more thing, RFC 5077 has another flavor of session resumption which openssl supports (original >>implemented as RFC 4057 back in 2007 I think). This allows us to resume sessions without carrying state >>on the server side which as you can imagine is a big deal for service vendors. Probably there is no API >>level impact if messenger handles the session state itself but just wanted to put this on your radar.

Ok, good to know.

Could one of you file a JIRA for this upstream? I'm trying to get things a little more organized on the process front and keep everything centralized in JIRA.

--Rafael

Issue Links

• duplicates: PROTON-52 Support for SSL session resume.
• is depended upon by: PROTON-181 SSL layer - deprecate old per-connection credentials API, introduce new top-level configuration domain