I'm a bit stumped by what I'm seeing in wireshark. I am attempting a TLS session resume from a client 10.66.128.10 to server 10.26.0.196, and am seeing an unexpected event - the client is sending the Change Cipher Spec and Encrypted Handshake message in two separate messages, and waiting for TCP ACKS for each:
According to everything I've read online, this should come in one message - one great aspect of a resume is we don't have that extra RTT. Here is an example website that says this...https://vincent.bernat.ch/en/blog/2011-ssl-session-reuse-rfc5077
The issue is clear... time. This costs us about 0.6s which is huge for our application.
Is this expected or configurable?
Thanks!