Security Basics mailing list archives

TLS Session Resumption


From: Marc-André Laverdière <marcandre.laverdiere () gmail com>
Date: Thu, 11 Jun 2009 17:13:42 +0530

Hello group,

I'm spending a lot of time having trying to implement session
resumption on a C# client to talk TLS to Java.
The reason being that the lousy TLS API in .NET doesn't support real
strong ciphersuites :(

Now, the resuming handshake fails on the checksum, so I'm trying to
understand if I need to computer the checksum over all previous
handshake messages, or only with the current handshake's messages?

The spec is not clear about this... can anyone help???

--
Marc-André LAVERDIÈRE
"Perseverance must finish its work so that you may be mature and
complete, not lacking anything." -James 1:4
mlaverd.theunixplace.com/blog

/"\
\ /    ASCII Ribbon Campaign
 X      against HTML e-mail
/ \

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Need to pass the CISSP? InfoSec Institute's CISSP Boot Camp in both Instructor-Led and Online formats is the most 
concentrated exam prep available. Comprehensive course materials and an expert instructor means you pass the exam. Gain 
a laser like insight into what is covered on the exam, with zero fluff!

http://www.infosecinstitute.com/courses/cissp_bootcamp_training.html
------------------------------------------------------------------------


Current thread: