CODEWITHSUNDEEP
copensslssl-certificatehandshake
judian
judian

Reputation: 3

How can a client use prestored server's certificate to do SSL handshake?

I know that during normal SSL handshake, the client receives the server's certificate and verifies it, then uses the server's public key to encrypt the session key.

I want to write a SSL client in C language on Linux. During SSL handshake, it doesn't have to wait for the server's certificate and it sends the session key encrypted with the server's public key that have already been downloaded previously.

I am learning how to use OpenSSL, I only need the do-handshake part here.

Thanks for attention. Why to do this? The ISP or gateway can censor the certificate and block the connection according to names in the certificate.

Upvotes: 0

Views: 162

Answers (1)

jsha
jsha

Reputation: 652

Unfortunately, this is impossible. As part of the SSL (or TLS) protocol, the server will always send its certificate.

If you would like to bypass ISP censorship, I recommend using a VPN or Tor.

Upvotes: 1

Related Questions