NAME

SSL_CTX_flush_sessions, SSL_flush_sessions − Remove expired sessions

SYNOPSIS

#include <openssl/ssl.h>
void SSL_CTX_flush_sessions(
        SSL_CTX ∗ctx, long tm ); void SSL_flush_sessions(
        SSL_CTX ∗ctx, long tm );

DESCRIPTION

The SSL_CTX_flush_sessions() function causes a run through the session cache of ctx to remove sessions expired at time (tm). 

The SSL_flush_sessions() function is a synonym for the SSL_CTX_flush_sessions() function. 

NOTES

If enabled, the internal session cache will collect all sessions established up to the specified maximum number. (See SSL_CTX_sess_set_cache_size()). As sessions will not be reused once they are expired, they should be removed from the cache to save resources. This can be done  automatically whenever 255 new sessions are established (see SSL_CTX_set_session_cache_mode()) or manually by calling the SSL_CTX_flush_sessions() function. 

The parameter tm specifies the time which should be used for the expiration test. In most cases the actual time given by time(0) will be used. 

The SSL_CTX_flush_sessions() function will only check sessions stored in the internal cache. When a session is found and removed, the remove_session_cb is called to synchronize with the external cache. (See SSL_CTX_sess_set_get_cb().) 

SEE ALSO

Functions: ssl(3), SSL_CTX_set_session_cache_mode(3), SSL_CTX_set_timeout(3), SSL_CTX_sess_set_get_cb(3)