BODY { font-family:Arial, Helvetica, sans-serif;font-size:12px; }
My suggestion would be to use a BIO pair:
http://www.openssl.org/docs/crypto/BIO_new_bio_pair.html [1]
http://stackoverflow.com/questions/2512026/x-509-certificate-based-authentication-with-openssl-without-using-sockets
[2]
Len Holgate's code is useful:
http://www.lenholgate.com/blog/2002/11/using-openssl-with-asynchronous-sockets.html
[3]
In this instance, you handle the TCP side of communications so you
can call the upper level functions and coalesce the the TLS records
before you pass them to the lower level (TCP) for sending.
Carl
On Mon 02/04/12 10:21 AM , Prabhu S yespra...@gmail.com sent:
Hi,
Our OpenSSL bases client application is used to test a SSL gateway
which is using a third-party commercial SSL stack. In the field it is
observed that with one particular SSL client device our server does
not process the application data if the data is received in two SSL
records in one TPS segment. The Wireshark trace would show the
following capture for the data received after SSL handshake.
Secure Socket Layer SSLv3 Record Layer: Application Data
Protocol: Application Data SSLv3 Record Layer: Application Data
Protocol: Application Data
If the entire request from the client is contained in one SSL
record the SSL gateway has no issues.
I would like to simulate the field condition with our OpenSSL
client simulator. I tried two immediate SSL_writes but that gets
transmitted in two TCP segments.
Thanks in advance for any suggestions.
-Prabhu
Links:
------
[1] http://www.openssl.org/docs/crypto/BIO_new_bio_pair.html
[2]
http://stackoverflow.com/questions/2512026/x-509-certificate-based-authentication-with-openssl-without-using-sockets
[3]
http://www.lenholgate.com/blog/2002/11/using-openssl-with-asynchronous-sockets.html
