Post

Replies

Boosts

Views

Activity

Reply to TLS Session Resumption is not working
I conducted a few experiments. First, I started a local server with OpenSSL as follows: openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 3 -nodes -subj "/CN=localhost" openssl s_server -accept 8443 -cert cert.pem -key key.pem -tls1_3 -www -num_tickets 2 -keylogfile keylog.txt -msg -state When I opened https://localhost:8443 in Google Chrome and captured the loopback interface with Wireshark, I saw ClientHello packets containing a pre_shared_key. However, when I ran the same experiment with Safari, there was no ClientHello packet containing a pre_shared_key at all. This led me to suspect that the network stack used by Safari may have stricter requirements for enabling TLS Session Resumption compared to Chrome, and that the same conditions might also apply to URLSession.
2w