On Fri, Jun 21, 2002 at 10:18:51AM -0400, Zeng, Ming wrote:
> Maybe I am too stupid to figure out how to reply to your question from your
> message directly, so I choose to do it my way.
> 
> Yes. error:140940E5:SSL routines:SSL3_READ_BYTES:ssl handshake failure  is
> the only error my program keeps logging every couple of hours. I have all
> the error handling code in place, and this error only happens in the
> SSL_read.

I did have a look into the ssl/* code. SSL_HANDSHAKE_FAILURE in ssl3_read_bytes
is only flagged, if the s->handshake function returns 0.
This means, that a handshake took place. If the connection was already open,
this means that a renegotiation took place (or at least was attempted).
If I didn't misunderstand ssl3_connect (which is the handshake function
for SSLv3), a return value of 0 should only appear, if 0 bytes where read
from the server: the server did simply close the connection.
(From the source it also seems to be consistent, that there is no error
logged, as I did not see any entry added to the error queue in this case
when looking over the code.)

I don't have an idea however, on what you could do against the problem...

Best regards,
        Lutz
-- 
Lutz Jaenicke                             [EMAIL PROTECTED]
http://www.aet.TU-Cottbus.DE/personen/jaenicke/
BTU Cottbus, Allgemeine Elektrotechnik
Universitaetsplatz 3-4, D-03044 Cottbus
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to