Does boost::asio use ssl session cache?

Question

For example, I develope email client. I know that some servers, for example, imap.gmail.com, cache SSL sessions. So I want reuse SSL sessions (from cache on my side) to reduce server load.

I use boost::asio as network engine. Questions are:

if boost::asio::ssl::stream doesn't use the ssl-session-cache, how can I enable it?
if boost::asio::ssl::stream use the ssl-session-cache, how can I turn it off? :)

I think it's due to the ssl_context: stackoverflow.com/a/35136363/85371 — sehe
@sehe, thank you, it's very helpful. I have understood, that I need use ssl::context::native_handle() + SSL_CTX_set_session_cache_mode() + SSL_set_session() and so on. I will try ) — o2gy

o2gy o2gy · Accepted Answer · 2017-01-20T16:06:49

boost::asio does not support ssl-session caching mechanism directly. But, as boost::asio::ssl::stream keeps SSL_SESSION object (from the openssl library) inside, it is easy to do manually.

An implementation could be as follows:

boost::asio::io_service io;
boost::asio::ssl::context ctx(boost::asio::ssl::context::sslv23_client);
boost::asio::ssl::stream<boost::asio::ip::tcp::socket> backend(io, ctx); 

// need some object that will store the cache
std::map<std::string, SSL_SESSION*> ssl_cache;

// add session to the cache after a successful connection
SSL_SESSION *session = SSL_get1_session(backend.native_handle());
ssl_cache[host] = session;

// before a new connection to the 'host', check the cache
auto cached_session = ssl_cache.find(host);
if (cached_session != ssl_cache.end())
{
    SSL_SESSION *session = cached_session->second;
    SSL_set_session(backend.native_handle(), session);
}

// after a connection can check if ssl-session was reused
if (SSL_session_reused(backend.native_handle()))
{
    // reused
}

It is important that this approach supports both caching mechanism:

ssl-tickets (RFC 5077)
session identifiers (RFC 5246)

Does boost::asio use ssl session cache?

1 Answers