Am 06.10.2011 23:28, schrieb Ritesh Rekhi:

Does openssl support TLS false start
http://tools.ietf.org/html/draft-bmoeller-tls-falsestart-00 ?

I cite the last section of this draft:

   At the time of writing, the authors are not aware of any deployed TLS
   implementation that is not False Start compatible (with one single
   host still pending investigation).  However, if an implementation
   uses a strategy of receiving as many bytes as available from the
   underlying transport during the handshake (expecting to find only
   handshake messages), achieving False Start compatibility would likely
   require special care.

One of the authors being member of the OpenSSL team i think that he has investigated the OpenSSL case.

If Openssl supports TLS false start how can I use it with s_client ?

When there is not already an appropriate option (i didn't check), you have to add corresponding code to s_client.

Ciao,
Richard
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to