Geek Answers Handbook

SSL session lifetime in https

We have an involved (but friendly) discussion between employees about the lifetime of the SSL session that underlies https communication.

When I establish an https connection to the server using a normal browser, the base ssl creates a session (including a shared secret) using asymmetric encryption, the rest of the communication is encrypted using (faster) symmetric encryption.

Question: on subsequent https requests (click the link) to the same server, is the old ssl session used, avoiding the overhead of asymmetric encryption to create the session key? Or is a new asymmetric encrypted ssl handshake to establish an ssl session necessary?

Or put it another way: Does an SSL session stay alive between https requests or does it end when the https request ends?

Since we are a bunch of nitpicks, a link to some official source will be appreciated here.

+5
source share
3 answers

See section 2.2 http://www.ietf.org/rfc/rfc2818.txt and section 8.1 http://www.ietf.org/rfc/rfc2616.txt

Essentially, an SSL session MUST be maintained as long as the client maintains a persistent connection.

For more information on implementing persistent connections in popular browsers, see http://en.wikipedia.org/wiki/HTTP_persistent_connection#Use_in_web_browsers

+1

Chrome:

https://www.americanexpress.com. netstat :

$ netstat -n -p tcp|grep 184.86.149.155
tcp4       0      0  10.177.78.58.50311     184.86.149.155.443     ESTABLISHED
tcp4       0      0  10.177.78.58.50310     184.86.149.155.443     ESTABLISHED
tcp4       0      0  10.177.78.58.50309     184.86.149.155.443     ESTABLISHED

- netstat :

$ netstat -n -p tcp|grep 184.86.149.155
tcp4       0      0  10.177.78.58.50311     184.86.149.155.443     ESTABLISHED
tcp4       0      0  10.177.78.58.50310     184.86.149.155.443     ESTABLISHED
tcp4       0      0  10.177.78.58.50309     184.86.149.155.443     ESTABLISHED

. , :

$ netstat -n -p tcp|grep 184.86.149.155
tcp4       0      0  10.177.78.58.50398     184.86.149.155.443     ESTABLISHED
tcp4       0      0  10.177.78.58.50311     184.86.149.155.443     ESTABLISHED
tcp4       0      0  10.177.78.58.50310     184.86.149.155.443     ESTABLISHED
tcp4       0      0  10.177.78.58.50309     184.86.149.155.443     ESTABLISHED

, - keep-alive http. :

http://gabenell.blogspot.com/2010/11/connection-keep-alive-timeouts-for.html

+8

, , , GNUTLS , :

https://test.gnutls.org:5556/

+3

More articles:


All Articles