At 15:20 17.07.2006 -0700, you wrote:
>Excuse me if I am saying the obvious. 
>
>But did you factor the fact that an SSL renegotiation
>or handshake can happen anytime during the
>conversation? 

Yes, I know that. But in our case there is no renegotiation: SSL_write
never returns an error and if the SSL_read return value is below zero
SSL_get_error returns only WANT_READ. In that case there was never someting
in the outgoing BIO. Therefore I assume that simply means: There is no more
data to decrypt.

>Irrespective of whether you are doing SSL_read or
>SSL_write... That is why you have to check for pending
>write during a SSL_read and vice versa in the non
>blocking case.

We check for pending read/write only if SSL_read/SSL_write return value is
below zero. Maybe we should check after every SSL_read/SSL_write
irrespective of the return value?

>
>This is what the manpage says at least. I may be wrong
>here.
>

Henrik
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to