On Wed, Aug 05, 2009, Rij wrote: > Hi All, > > I am opening a SSL connection from a client. The underlying socket and > BIO are non-blocking. I am observing that SSL_connect is executing > three times before it completes. While the first and the last call > return almost immediately (less than 1 ms), the intermediate call > takes 11 ms. Is this expected behavior? Why does SSL wait so long to > return? Any help please? >
Setting up an SSL connection requires some computationally intensive operations using public key algorithms and some others involving the setup of digests and ciphers. The amount of work that needs to be done on client and server depends on the ciphersuite being negotiated. The ephemeral DH ciphersuits require a key generation and DH agreement operation on both client and server for example as well as a private key signing on the server and public key verification on the client. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
