12 Oct
2009
12 Oct
'09
2:58 p.m.
David Mitchell wrote:
I was searching back in the archives, and in September there was a user who reported a problem with session resumption. I'm seeing the exact same symptoms I believe, also on Debian 5.0 with OpenSSL 0.9.8g. I never saw any follow up? Is there a fix known for this? I am using a locally compiled version of FreeRadius 2.1.7. It's linked against the system OpenSSL libraries though. Building a local 0.9.8k or even 1.0.0 is certainly an option if there is a chance it will help.
There isn't a lot we can do. It's not clear *why* OpenSSL resumes sessions when session resumption is disabled. Alan DeKok.