SSL_SESSION Structure

/* Lets make this into an ASN.1 type structure as follows
* SSL_SESSION_ID ::= SEQUENCE {
*	version 		INTEGER,	-- structure version number
*	SSLversion 		INTEGER,	-- SSL version number
*	Cipher 			OCTET_STRING,	-- the 3 byte cipher ID
*	Session_ID 		OCTET_STRING,	-- the Session ID
*	Master_key 		OCTET_STRING,	-- the master key
*	Key_Arg [ 0 ] IMPLICIT	OCTET_STRING,	-- the optional Key argument
*	Time [ 1 ] EXPLICIT	INTEGER,	-- optional Start Time
*	Timeout [ 2 ] EXPLICIT	INTEGER,	-- optional Timeout ins seconds
*	Peer [ 3 ] EXPLICIT	X509,		-- optional Peer Certificate
*	Session_ID_context [ 4 ] EXPLICIT OCTET_STRING,   -- the Session ID context
*	Verify_result [ 5 ] EXPLICIT INTEGER    -- X509_V_... code for `Peer'
*	Compression [6] IMPLICIT ASN1_OBJECT	-- compression OID XXXXX
*	}
* Look in ssl/ssl_asn1.c for more details
* I'm using EXPLICIT tags so I can read the damn things using asn1parse :-).
*/
 
typedef struct ssl_session_st
 
{
	int ssl_version;	/* what ssl version session info is
				 * being kept in here? */
 
	/* only really used in SSLv2 */
 
	unsigned int key_arg_length;
	unsigned char key_arg[SSL_MAX_KEY_ARG_LENGTH];
	int master_key_length;
	unsigned char master_key[SSL_MAX_MASTER_KEY_LENGTH];
 
/* session_id - valid? */
 
	unsigned int session_id_length;
	unsigned char session_id[SSL_MAX_SSL_SESSION_ID_LENGTH];
 
	/* this is used to determine whether the session is being reused in
	 * the appropriate context. It is up to the application to set this,
	 * via SSL_new */
 
	unsigned int sid_ctx_length;
	unsigned char sid_ctx[SSL_MAX_SID_CTX_LENGTH];
	int not_resumable;
 
	/* The cert is the certificate used to establish this connection */
 
	struct sess_cert_st /* SESS_CERT */ *sess_cert;
 
	/* This is the cert for the other end.
	 * On clients, it will be the same as sess_cert->peer_key->x509
	 * (the latter is not enough as sess_cert is not retained
	 * in the external representation of sessions, see ssl_asn1.c). */
 
	X509 *peer;
 
	/* when app_verify_callback accepts a session where the peer's certificate
	 * is not ok, we must remember the error for session reuse: */
 
	long verify_result; /* only for servers */
 
	int references;
	long timeout;
	long time;
	int compress_meth;		/* Need to lookup the method */
 
	SSL_CIPHER *cipher;
 
	unsigned long cipher_id;	/* when ASN.1 loaded, this
 
					 * needs to be used to load
					 * the 'cipher' structure */
 
	STACK_OF(SSL_CIPHER) *ciphers; /* shared ciphers? */
	CRYPTO_EX_DATA ex_data; /* application specific data */
 
	/* These are used to make removal of session-ids more
	 * efficient and to implement a maximum cache size. */
 
	struct ssl_session_st *prev,*next;
 
} SSL_SESSION;