i'm currently trying to implement ssl renegotiation for an application which uses 
openssl in a non-blocking mode.

when my app want to renegotiate i call the following functions :

-------------
SSL_renegotiate(ssl);
result = SSL_do_handshake(ssl);
/* result is okay at this point */

/* my app waits for a while, actually, it call's poll() with a timeout of 5 seconds */

/* about 5 seconds later */
result = SSL_do_handshake(ssl);
/* no error returned here */

pending = SSL_renegotiate_pending(ssl);
/* pending is allways non-zero */

-------------

am i missing something ? is there something extra i need to do ?

i've run ethereal to watch the communication, and when the application calls this code 
no communication happens on the socket.

i was expecting to see my app say 'hello', and receive a certificate again (like when 
the communication first starts up) but absolutely nothing is sent.

i'm using SSL_VERIFY_PEER and SSL_FAIL_IF_NO_PEER_CERT as my verify options in both 
directions (client->server and server->client).

can anyone help ?

cheers

nigel spowage


********************************************************************************************************
This e-mail is from Energis Communications Ltd, 185 Park Street, London, SE1 9DY,
United Kingdom, No: 2630471.

This e-mail is confidential to the addressee and may be privileged. The views
expressed are personal and do not necessarily reflect those of Energis. If you are not
the intended recipient please notify the sender immediately by calling our switchboard 
on
+44 (0) 20 7206 5555 and do not disclose to another person or use, copy or forward
all or any of it in any form.

********************************************************************************************************
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to