ssl_ctx_flush_sessions(3)
NAME
SSL_CTX_flush_sessions, SSL_flush_sessions - remove expired sessions
SYNOPSIS
#include <openssl/ssl.h> void SSL_CTX_flush_sessions(SSL_CTX *ctx, long tm); void SSL_flush_sessions(SSL_CTX *ctx, long tm);
DESCRIPTION
SSL_CTX_flush_sessions() causes a run through the session cache of ctx
to remove sessions expired at time tm.
SSL_flush_sessions() is a synonym for SSL_CTX_flush_sessions().
NOTES
- If enabled, the internal session cache will collect all sessions
established up to the specified maximum number (see
SSL_CTX_sess_set_cache_size()). As sessions will not be reused ones they are expired, they should be removed from the cache to save
resources. This can either be done - automatically whenever 255 new sessions were established (see
- SSL_CTX_set_session_cache_mode(3)) or manually by calling SSL_CTX_flush_sessions().
- The parameter tm specifies the time which should be used for the
expiration test, in most cases the actual time given by time(0) will be used. - SSL_CTX_flush_sessions() will only check sessions stored in the
internal cache. When a session is found and removed, the
remove_session_cb is however called to synchronize with the external
cache (see SSL_CTX_sess_set_get_cb(3)).