Forum Discussion
Tarmo_Oja_95406
Nimbostratus
Nimbostratussession {add|delete} ssl question
I found this code from Code Share.
rule c_cert_session {
when RULE_INIT {
set ::key [AES::key 128]
log local0. "the key is: $::key"
}
when CLIENTSSL_CLIENTCERT { ...
Have you considered forcing a SSL re-negotiation after a certain time out has been reached? Here is an example ...
when CLIENT_ACCEPTED {
set http_collect 0
}
when HTTP_REQUEST {
if {[HTTP::request_num] > 10} {
SSL::renegotiate
HTTP::collect
set http_collect 1
}
}
when CLIENTSSL_HANDSHAKE {
if {$http_collect == 1} {
set http_collect 0
HTTP::release
}
}
You will at least be able to verify that the client still has the card.
