At 15:20 17.07.2006 -0700, you wrote: >Excuse me if I am saying the obvious. > >But did you factor the fact that an SSL renegotiation >or handshake can happen anytime during the >conversation?
Yes, I know that. But in our case there is no renegotiation: SSL_write never returns an error and if the SSL_read return value is below zero SSL_get_error returns only WANT_READ. In that case there was never someting in the outgoing BIO. Therefore I assume that simply means: There is no more data to decrypt. >Irrespective of whether you are doing SSL_read or >SSL_write... That is why you have to check for pending >write during a SSL_read and vice versa in the non >blocking case. We check for pending read/write only if SSL_read/SSL_write return value is below zero. Maybe we should check after every SSL_read/SSL_write irrespective of the return value? > >This is what the manpage says at least. I may be wrong >here. > Henrik ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]