stream-ssl: Set SSL session cache mode to disables.
authorGuru Chaitanya Perakam <gperakam@Brocade.com>
Fri, 3 Jul 2015 05:17:31 +0000 (10:47 +0530)
committerBen Pfaff <blp@nicira.com>
Mon, 6 Jul 2015 15:07:48 +0000 (08:07 -0700)
commit8e5d71b45e1f81897a5a9ecda82b0235113e674a
treea4f9b1936b1d4565cd998062fa5f23064e466591
parentfea7ac6166b5f7e542cc89d57a8d821e99978dd1
stream-ssl: Set SSL session cache mode to disables.

To enable SSL clients to reconnect with the ovs-testcontoller without being
rejected, one must either set the SSL Session ID flag or disable the
SSL caching. This patch disables the SSL caching/reuse.

In the absence of this fix, the error message from ovs-testcontroller is as
below:

  SSL protocol error: SSL_accept (error:140D9115:SSL
  routines:SSL_GET_PREV_SESSION:session id context uninitialized)

See <https://www.openssl.org/docs/ssl/SSL_CTX_set_session_id_context.html>.

Validation: Tested with ovs-testcontroller, by performing SSL reconnection
with OpenSSL based SSL client.

Signed-off-by: Guru Chaitanya Perakam <gperakam@brocade.com>
Reported-by: Guru Chaitanya Perakam <gperakam@brocade.com>
Signed-off-by: Ben Pfaff <blp@nicira.com>
AUTHORS
lib/stream-ssl.c