Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm using nginx, and want to implement SSL session resumption. How should we I test if it is working?

I have enabled these settings:

ssl_session_cache    shared:SSL:10m;
ssl_session_timeout  10m;
share|improve this question

2 Answers 2

up vote 7 down vote accepted

I'm not sure of a way to test locally, but if your site is public, ssllabs provide a nice testing tool:

https://www.ssllabs.com/ssldb/index.html

share|improve this answer
    
Thanks. The easiest way :-) –  Sabya Jan 4 '12 at 9:09

You can use openssl to test locally :

openssl s_client -connect example.com:443 -reconnect

Or :

openssl s_client -connect example.com:443 -sess_out /tmp/ssl_s
openssl s_client -connect example.com:443 -sess_in /tmp/ssl_s

For the first command you'll get output like this :

drop connection and then reconnect
CONNECTED(00000003)
---
Reused, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256

For the last one, you'll get this in case of session resumption:

SSL handshake has read 142 bytes and written 583 bytes
---
Reused, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256

or this in case of failure:

SSL handshake has read 5855 bytes and written 722 bytes
---
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-GCM-SHA384

You can see the handshake is way bigger when it's new

share|improve this answer
    
It would be helpful if you could explain what the output means, and how to use it to determine if session resumption is working. –  Kevin Cox Aug 20 at 2:23
1  
check for "Reused, TLSv1/SSLv3, Cipher is <cipher>" –  Bastien Durel Aug 20 at 7:13

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.