[ovs-git] [openvswitch/ovs] 895107: stream-ssl: Set SSL session cache mode to disables...

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/openvswitch/ovs
  Commit: 895107e4fe31fed7eaf6f13891408b8d2e11521a
      https://github.com/openvswitch/ovs/commit/895107e4fe31fed7eaf6f13891408b8d2e11521a
  Author: Guru Chaitanya Perakam <gperakam at Brocade.com>
  Date:   2015-07-06 (Mon, 06 Jul 2015)

  Changed paths:
    M AUTHORS
    M lib/stream-ssl.c

  Log Message:
  -----------
  stream-ssl: Set SSL session cache mode to disables.

To enable SSL clients to reconnect with the ovs-testcontoller without being
rejected, one must either set the SSL Session ID flag or disable the
SSL caching. This patch disables the SSL caching/reuse.

In the absence of this fix, the error message from ovs-testcontroller is as
below:

  SSL protocol error: SSL_accept (error:140D9115:SSL
  routines:SSL_GET_PREV_SESSION:session id context uninitialized)

See <https://www.openssl.org/docs/ssl/SSL_CTX_set_session_id_context.html>.

Validation: Tested with ovs-testcontroller, by performing SSL reconnection
with OpenSSL based SSL client.

Signed-off-by: Guru Chaitanya Perakam <gperakam at brocade.com>
Reported-by: Guru Chaitanya Perakam <gperakam at brocade.com>
Signed-off-by: Ben Pfaff <blp at nicira.com>