> We are splitting the SSL connection over our network and thus break > this thing. :( > > thanks and regards > -Krishna
Split SSL is not SSL. SSL makes numerous things visible to the two endpoints and they are supposed to match. By splitting the SSL connection, you make these things not match. I know of a lot of software that will detect this instantly and refuse, correctly, to use the connection. You do not support SSL because SSL provides the endpoints assurances that their connection is not split, and you cannot preserve those assurances. Depending upon who or what you are, you likely should not claim to support SSL. The split turns SSL into ISL. DS ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]