56fa8e69cf
From: "Chris D. Peterson" <cpeterson@aventail.com> Subject: Implementation Issues with OpenSSL To: openssl-users@openssl.org Date: Wed, 22 Aug 2001 16:13:17 -0700 The patch included in the original post may improve the internal session list handling (and is therefore worth a seperate investigation). No change to the list handling will however solve the problems of incorrect SSL_SESSION_free() calls. The session list is only one possible point of failure, dangling pointers would also occur for SSL object currently using the session. The correct solution is to only use SSL_SESSION_free() when applicable!
58 lines
1.6 KiB
Plaintext
58 lines
1.6 KiB
Plaintext
=pod
|
|
|
|
=head1 NAME
|
|
|
|
SSL_set_session - set a TLS/SSL session to be used during TLS/SSL connect
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
#include <openssl/ssl.h>
|
|
|
|
int SSL_set_session(SSL *ssl, SSL_SESSION *session);
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
SSL_set_session() sets B<session> to be used when the TLS/SSL connection
|
|
is to be established. SSL_set_session() is only useful for TLS/SSL clients.
|
|
When the session is set, the reference count of B<session> is incremented
|
|
by 1. If the session is not reused, the reference count is decremented
|
|
again during SSL_connect(). Whether the session was reused can be queried
|
|
with the L<SSL_session_reused(3)|SSL_session_reused(3)> call.
|
|
|
|
If there is already a session set inside B<ssl> (because it was set with
|
|
SSL_set_session() before or because the same B<ssl> was already used for
|
|
a connection), SSL_SESSION_free() will be called for that session.
|
|
|
|
=head1 NOTES
|
|
|
|
SSL_SESSION objects keep internal link information about the session cache
|
|
list, when being inserted into one SSL_CTX object's session cache.
|
|
One SSL_SESSION object, regardless of its reference count, must therefore
|
|
only be used with one SSL_CTX object (and the SSL objects created
|
|
from this SSL_CTX object).
|
|
|
|
=head1 RETURN VALUES
|
|
|
|
The following return values can occur:
|
|
|
|
=over 4
|
|
|
|
=item 0
|
|
|
|
The operation failed; check the error stack to find out the reason.
|
|
|
|
=item 1
|
|
|
|
The operation succeeded.
|
|
|
|
=back
|
|
|
|
=head1 SEE ALSO
|
|
|
|
L<ssl(3)|ssl(3)>, L<SSL_SESSION_free(3)|SSL_SESSION_free(3)>,
|
|
L<SSL_get_session(3)|SSL_get_session(3)>,
|
|
L<SSL_session_reused(3)|SSL_session_reused(3)>,
|
|
L<SSL_CTX_set_session_cache_mode(3)|SSL_CTX_set_session_cache_mode(3)>
|
|
|
|
=cut
|