Hello, > What would happen if openssl is starved of application data records > and is fed only control messages? Would it misbehave? SSL application records are not mandatory (but usually very useful :-) So you may establish SSL connection and do for example renegotiation after renegotiation or something like that. But you can not silently remove SSL application record because you will get MAC verification errors.
Best regards, -- Marek Marcola <[EMAIL PROTECTED]> ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]