OpenSSL cookie support
I have a basic (HTTP over) SSL client written using the OpenSSL library, following the exact instructions provided in the "Network Security with OpenSSL" book (Chandra, Messier, Viega). The client is NOT a part of a web browser (it's a dedicated client-server application).
The server I'm working with (not under my control) will soon start using cookies for identifying client requests, so I've searched "Network Security with OpenSSL" and some websites for how to add cookie support to my OpenSSL client. No luck. The only info I can find is how to add cookie support to an OpenSSL based SERVER, which is not what I n开发者_开发技巧eed.
Any good references you can give me?
Thanks a lot.
Cookies are not related to SSL in any way. They are part of HTTP protocol and are described in RFC 2965.
Upd: our developers suggested that maybe you were looking for information on renegotiation security issue, where to workaround it cookie-like mechanism was used, but this is unlikely. You better ask your server admin for additional information.
精彩评论