Connecting Tech Pros Worldwide Help | Site Map

PHP, OpenSSL Session Key?

jmkovacs
Guest
 
Posts: n/a
#1: Jul 17 '05
Hello,

Is there a way using PHP's OpenSSL library functions to obtain the
shared session key established between a client and the server used in
the current SSL connection? I intend to use this information to cause
certain data returned by the server to be session dependent based on
that key and become invalid if the session key is has changed or is no
longer available. Any help and direction in using the available
functions for my purposes would be appreciated, thanks.

-Jason Kovacs

Daniel Tryba
Guest
 
Posts: n/a
#2: Jul 17 '05

re: PHP, OpenSSL Session Key?


jmkovacs <jason@cfhost.org> wrote:[color=blue]
> Is there a way using PHP's OpenSSL library functions to obtain the
> shared session key established between a client and the server used in
> the current SSL connection?[/color]

I have absolutely no idea.
[color=blue]
> I intend to use this information to cause certain data returned by the
> server to be session dependent based on that key and become invalid if
> the session key is has changed or is no longer available.[/color]

But why would you do session management this way (I can only guess at
session hijacking)?

Closed Thread