Hello,
>  What would happen if openssl is starved of application data records
> and is fed only control messages? Would it misbehave? 
SSL application records are not mandatory (but usually very useful :-)
So you may establish SSL connection and do for example
renegotiation after renegotiation or something like that.
But you can not silently remove SSL application record
because you will get MAC verification errors.

Best regards,
-- 
Marek Marcola <[EMAIL PROTECTED]>

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to