> We are splitting the SSL connection over our network and thus break
> this thing.  :(
>
> thanks and regards
> -Krishna

        Split SSL is not SSL. SSL makes numerous things visible to the two
endpoints and they are supposed to match. By splitting the SSL connection,
you make these things not match. I know of a lot of software that will
detect this instantly and refuse, correctly, to use the connection.

        You do not support SSL because SSL provides the endpoints assurances 
that
their connection is not split, and you cannot preserve those assurances.
Depending upon who or what you are, you likely should not claim to support
SSL. The split turns SSL into ISL.

        DS


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to