Forum Discussion
Jason_Keating
Altostratus
Altostratussession add ssl [SSL::sessionid]
My question is in regard to SSL::sessionid.
In the definition below (1) it is stated:
"Returns the current connection's SSL session ID if it exists in the session cache. If it does...
hoolio
Cirrostratus
CirrostratusHi J,
See this post for details on the 0 session IDs:
SSL::sessionid always returns zero?!
http://devcentral.f5.com/Default.aspx?tabid=53&aft=1874018740
It looks like the null session ID will occur on every attempt to retrieve SSL::sessionid if you set the client SSL profile to validate the client certificate always (instead of once). This kind of makes sense if you want to check the client cert on every request (and therefore don't ever want to add the session ID to the cache).
Aaron
