[prev in list] [next in list] [prev in thread] [next in thread] 

List:       apache-httpd-users
Subject:    [users@httpd] SSL Session Timeout value
From:       Nipun Thathsara <nipunthathsara () gmail ! com>
Date:       2017-10-19 8:59:56
Message-ID: CALOGtkXRM=dfqt2Sb7K_eQ=Wj_+AryNeHE5vVPwikfDWgDauQQ () mail ! gmail ! com
[Download RAW message or body]

Hi,

Scenario:

   - My backend service is configured to TLS1.1 initially. Client support
   all TLS versions.
   - Upon sending a request SSL handshake happens like this.
   *Client Hello TLS1.2   Server Hello TLS1.1*
   - Then i configure backend service to TLS1.2
   - Upon sending a request handshake fails.
   *Client Hello TLS1.1 *(Due to previous session memory of 1.1 backend
   service)  And *connection fails*. (Since server only support *TLS1.2*)

Question:

   - What's the SSL session timeout value in HTTP Core?
   So that i know the duration the service fails if backend changes its TLS
   version.

Regards,
Nipun

-- 
Regards,


*S H Nipun Thathsara*
Undergraduate, University of Moratuwa
+94713031875 |
Katubedda, Sri Lanka
<http://lk.linkedin.com/in/nipunthathsara>
<http://github.com/nipunthathsara>

[Attachment #3 (text/html)]

<div dir="ltr">Hi,<div><br></div><div>Scenario:   </div><div><ul><li>My backend \
service is configured to TLS1.1 initially. Client support all TLS \
versions.<br></li><li>Upon sending a request SSL handshake happens like this.  \
<br><b>Client Hello TLS1.2    Server Hello TLS1.1</b></li><li>Then i configure \
backend service to TLS1.2</li><li>Upon sending a request handshake \
fails.<br><b>Client Hello TLS1.1 </b>(Due to previous session memory of 1.1 backend \
service)   And <b>connection fails</b>. (Since server only support \
<b>TLS1.2</b>)</li></ul><div>Question:  </div><div><ul><li>What&#39;s the SSL session \
timeout value in HTTP Core?  <br>So that i know the duration the service fails if \
backend changes its TLS \
version.</li></ul><div>Regards,</div></div><div>Nipun</div><div><br></div>-- <br><div \
class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div \
dir="ltr"><div dir="ltr"><div><div dir="ltr">Regards,</div></div><br><div \
href="http://WISESTAMP_SIG_0"><div style="max-width:600px;direction:ltr"><div \
style="max-width:485px"> <table border="0" cellspacing="0" cellpadding="0" \
width="485" style="width:485px"> <tbody> <tr valign="top"> <td \
style="width:10px;padding-right:10px"><br></td> <td style="border-right:1px solid \
#5e5e5e"></td> <td style="display:inline-block;text-align:initial;font:12px \
Arial;color:#646464;padding:0 10px"> <table border="0" cellspacing="0" \
cellpadding="0"> <tbody> <tr> <td \
style="display:inline-block;text-align:initial;font:12px Arial;color:#646464"> <b>S H \
Nipun Thathsara</b><br> <span style="display:inline-block">Undergraduate</span>, \
<span style="display:inline-block">University of Moratuwa</span> </td> </tr> <tr> <td \
style="font:12px Arial;color:#8d8d8d;font-size:12px;padding:5px 0"> <span \
style="display:inline-block"><a href="tel:+94713031875" \
style="display:inline-block;color:#8d8d8d;text-decoration:none" \
target="_blank">+94713031875</a></span> <span \
style="color:#5e5e5e;display:inline-block">|<br></span> <span \
style="color:#8d8d8d;display:inline-block">Katubedda, Sri Lanka</span> </td> </tr> \
<tr> <td style="margin-top:5px"><a href="http://lk.linkedin.com/in/nipunthathsara" \
target="_blank"><img style="border-radius:0;border:0;width:16px;height:16px" \
width="16" height="16" \
src="https://s3.amazonaws.com/images.wisestamp.com/icons_32/linkedin.png"></a>  <a \
href="http://github.com/nipunthathsara" target="_blank"><img \
style="border-radius:0;border:0;width:16px;height:16px" width="16" height="16" \
src="https://s3.amazonaws.com/images.wisestamp.com/icons_32/github.png"></a></td> \
</tr> </tbody> </table></td></tr></tbody></table></div></div><span \
style="display:none"></span><img \
style="display:none"></div></div></div></div></div></div> </div></div>



[prev in list] [next in list] [prev in thread] [next in thread]