On Mon, Jan 27, 2003 at 10:33:44AM -0000, Nigel Spowage wrote:

> i'm currently trying to implement ssl renegotiation for an
> application which uses openssl in a non-blocking mode.

> SSL_renegotiate(ssl);
> result = SSL_do_handshake(ssl);
> /* result is okay at this point */
> 
> /* my app waits for a while, actually, it call's poll() with a timeout of 5 seconds 
>*/
> 
> /* about 5 seconds later */
> result = SSL_do_handshake(ssl);
> /* no error returned here */
> 
> pending = SSL_renegotiate_pending(ssl);
> /* pending is allways non-zero */

> am i missing something ? is there something extra i need to do ?

Yes, call SSL_renegotiate() to initiate a second handshake once the
first one has finished.  Otherwise SSL_do_handshake() does not think
that there is something to do for it.


-- 
Bodo Möller <[EMAIL PROTECTED]>
PGP http://www.informatik.tu-darmstadt.de/TI/Mitarbeiter/moeller/0x36d2c658.html
* TU Darmstadt, Theoretische Informatik, Alexanderstr. 10, D-64283 Darmstadt
* Tel. +49-6151-16-6628, Fax +49-6151-16-6036
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to