On Thu, Feb 06, 2003 at 01:38:11PM +0000, Séamus O'Toole wrote: > I have recently downloaded the latest version of OpenSSL and I am using it > in the development of a Secure Voice over IP Project. > > Is there a way to extract the session key from the SSL session and use it to > encrypt the data, and then to decrypt the data? > > I am unable to use SSL_read()/ SSL_write() due to the nature of my > project..it uses datagram instead of stream sockets. But if there is a way > to use the libraries with datagram sockets I would be very grateful. > > After the SSL handshake is performed I would like to extract the session key > and use it to encrypt and decrypt the data.
The SSL/TLS protocols only work with streams. You could use datagrams to implement streams (look at BIO pairs for how to implement this on top of OpenSSL), but if you want the protocol to tolerate packet loss, you can't use SSL or TLS. -- Bodo Möller <[EMAIL PROTECTED]> PGP http://www.informatik.tu-darmstadt.de/TI/Mitarbeiter/moeller/0x36d2c658.html * TU Darmstadt, Theoretische Informatik, Alexanderstr. 10, D-64283 Darmstadt * Tel. +49-6151-16-6628, Fax +49-6151-16-6036 ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]