title: Apache "SSLSessionCacheTimeout" with Client Certs
body: <p>After logging onto my web app, users need to authenticate with a X.509 cert. </p>
  
  <p>After a period of inactivity, a user will try to continue using the site. At that point, a new session will be attempted to be made, but fail. It fails due to the fact that re-authentication is not occurring.</p>
  
  <p>If I were to increase Apache's <code>SSLSessionCacheTimeout</code> to, let's say, 8 hours , would the client no longer need to re-authenticate during session creation? </p>
  
  <p>Note - assuming a new session needs to be created within the 8 hours set for the Apache <code>SSLSessionCacheTimeout</code>.</p>
  
  <p><strong>EDIT</strong> Or, does the SSL session not impact HTTPS sessions at all?</p>