On Wed, 3 Sep 2003, Kent Yoder wrote:

> Hi,
>
>         Under heavy load (> 95%) on s390 (SLES8, openssl-0.9.7b), I've been
> seeing these bad write retries.  We're using 12 PCICA cards with IBMCA engine
> enabled and home-brew openssl client/server apps, and the errors only happen
> when doing hardware DES.  I discovered the following bug for a similar
> problem, which claims to have a patch.  Was this patch included in
> openssl-0.9.7b?  If not, where can I find it?
>
> Bug:
> http://www.aet.TU-Cottbus.DE/rt2/Ticket/Display.html?id=598
>
> (The post mentions requests over 250k, but all our client requests are 2k.)
> We're also seeing SSL_F_SSL3_SETUP_KEY_BLOCK:SSL_R_BAD_WRITE_RETRY on s390x
> at the same high CPU utilization, same configuration.  Below 95% CPU on both
> platforms runs error free.

You should do:

SSL_CTX_set_mode(ctx, SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER);

For your SSL_CTX before creating SSL structures out of it. This will fix
the problem.

In my opinion this option should be default.

Arne
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to