客户端如何使用预存储的服务器证书进行SSL握手？

Question

I know that during normal SSL handshake, the client receives the server's certificate and verifies it, then uses the server's public key to encrypt the session key.

I want to write a SSL client in C language on Linux. During SSL handshake, it doesn't have to wait for the server's certificate and it sends the session key encrypted with the server's public key that have already been downloaded previously.

I am learning how to use OpenSSL, I only need the do-handshake part here.

Thanks for attention. Why to do this? The ISP or gateway can censor the certificate and block the connection according to names in the certificate.

Answer 1

Unfortunately, this is impossible. As part of the SSL (or TLS) protocol, the server will always send its certificate.

If you would like to bypass ISP censorship, I recommend using a VPN or Tor.