I have do some work on pkcs11 engine but not on 9.8g just 9.8f.
what i want to know is after retCode = SSL_accept(ssl); if the
SSL_do_handshake() should be invoked explicitly.
Does the SSL_accept/SSL_connect has done the work of SSL_do_handshake().
thanks a lot for you quickly response!
On 15/02/2008, David Hostetter <[EMAIL PROTECTED]> wrote:
>
>
> After the accept do the following... BTW...are you using the pkcs11
> engine? I am trying to find out the patch for 9.8g version.
>
> sbio=BIO_new_socket(socketFd, BIO_NOCLOSE);
>
> // Create a new SSL structure
> ssl=SSL_new(ctx);
>
> // Connect the read and write BIOs
> SSL_set_bio(ssl, sbio, sbio);
>
> /* Wait for the client to initiate the TLS/SSL handshake. A
> ** return code of 1 indicates that the connection was
> successfully
> ** established.
> */
>
> printf("Wait for Client to initiate the handshake\n");
> retCode = SSL_accept(ssl);
>
>
>
> Anri Lau wrote:
> > Hello guys,
> >
> > I setting the CRL path for SSL by SSL_context, but it is not useful.
> >
> > In manual page SSL_connection and SSL_accept are used to inited a
> > handshake and SSL_do_handshake() perform a handshake
> >
> > SSL_do_handshake should be called explicitly after
> > SSL_accept/SSL_connection is called?
> >
> > does SSL_connection/SSL_accept do the work of validate the
> > certificate of client or server!
> >
> >
> > Thank you very much!
> >
>
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List openssl-users@openssl.org
> Automated List Manager [EMAIL PROTECTED]
>
--
Best regards to you and your family
