Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm using nginx, and want to implement SSL session resumption. How should we I test if it is working?

I have enabled these settings:

ssl_session_cache    shared:SSL:10m;
ssl_session_timeout  10m;
share|improve this question
up vote 8 down vote accepted

I'm not sure of a way to test locally, but if your site is public, ssllabs provide a nice testing tool:

share|improve this answer
Thanks. The easiest way :-) – Sabya Jan 4 '12 at 9:09

You can use openssl to test locally :

openssl s_client -connect -reconnect

Or :

openssl s_client -connect -sess_out /tmp/ssl_s
openssl s_client -connect -sess_in /tmp/ssl_s

For the first command you'll get output like this :

drop connection and then reconnect
Reused, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256

For the last one, you'll get this in case of session resumption:

SSL handshake has read 142 bytes and written 583 bytes
Reused, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256

or this in case of failure:

SSL handshake has read 5855 bytes and written 722 bytes
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-GCM-SHA384

You can see the handshake is way bigger when it's new

share|improve this answer
It would be helpful if you could explain what the output means, and how to use it to determine if session resumption is working. – Kevin Cox Aug 20 '14 at 2:23
check for "Reused, TLSv1/SSLv3, Cipher is <cipher>" – Bastien Durel Aug 20 '14 at 7:13

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.