Solved

In what cases will server send empty session id during TLS handshake

Posted on 2016-08-16
3
86 Views
Last Modified: 2016-09-03
HI,
I was reading : https://tools.ietf.org/html/rfc5246
And came across this line :
The server
      may return an empty session_id to indicate that the session will
      not be cached and therefore cannot be resumed.


This i also saw happening in one of our company servers which sent : Session ID length: 0  in TLS record.
Why will any server do that. Isnt it always beneficial to give the option to cache the session. So the next time the client
wants to connect it can be done faster ?

Thanks
0
Comment
Question by:Rohit Bajaj
  • 2
3 Comments
 
LVL 62

Accepted Solution

by:
gheist earned 300 total points
ID: 41761534
If apache does not have properly cinnected session id storage it does so (i.e on first connection it says it suppots sessions, on connection client sends session ID for next, apache neuters that because it is not found in its non-existant database.
0
 
LVL 22

Assisted Solution

by:eeRoot
eeRoot earned 200 total points
ID: 41764544
Likely to let the client app know that the session will not be held open.  An application developer may use this field to determine if re-auth is needed while the user session or application is still running.
0
 
LVL 62

Expert Comment

by:gheist
ID: 41765664
https://www.ietf.org/rfc/rfc5077.txt

   The server uses a zero-length SessionTicket extension to indicate to
   the client that it will send a new session ticket using the
   NewSessionTicket handshake message described in Section 3.3.  The
   server MUST send this extension in the ServerHello if it wishes to
   issue a new ticket to the client using the NewSessionTicket handshake
   message.  The server MUST NOT send this extension if it does not
   receive one in the ClientHello.
0

Featured Post

Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Short answer to this question: there is no effective WiFi manager in iOS devices as seen in Windows WiFi or Macbook OSx WiFi management, but this article will try and provide some amicable solutions to better suite your needs.
If your business is like most, chances are you still need to maintain a fax infrastructure for your staff. It’s hard to believe that a communication technology that was thriving in the mid-80s could still be an essential part of your team’s modern I…
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
Viewers will learn how to properly install and use Secure Shell (SSH) to work on projects or homework remotely. Download Secure Shell: Follow basic installation instructions: Open Secure Shell and use "Quick Connect" to enter credentials includi…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question