Hi,

        I've built a dedicated SSL-server with SSLeay (not WWW server) and it
has run smoothly for it's purpose. Now, I was just fooling around and
did a 'stupid' test with connecting to the port with Netscape, and was
surprised at the result. 

        The server ran smoothly past the SSL_accept, altho Netscape complainted
that there are no common ciphers between the browser and the 
server. That is natural, as I'm allowing only a special cipher. Of
course the server later failed in the next function, as Netscape was not
answering any more.

        Now, I've only seen in the examples, that a check against -1 is used
for the return value of the SSL_accept. Is it possible that the return
value is 0? I have only tested against -1 so far.

        For example, in the s2_srvr.c file the variable 'ret', which is used to
contain the return value for the ssl2_accept, is always checked
if (ret <= 0) goto end; 

        I haven't found documentation about this, what does it mean if the
return value then is 0?

        Greetings,
                        abe
-- 
Anssi Bragge 
UBS AG                   http://www.ubs.com/
Bahnhofstr. 45 / CH-8098 Zürich, Switzerland
Tel: +41-1-236 04 85 / Fax: +41-1-236 41 41 / GSM: +41-76-388 77 22
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to