Team
I have a query on enhancing the OpenSSL logs,

As you know, "SSL_accept" is just one call using SSL library for an SSL 
handshake, but there are couple of steps inside this process like Client 
Hello / Server Hello, etc.
What if i need to find the internal failures in SSL handshake ? Is there 
any openssl debug option available where the SSL library is capable of 
logging additional info ?

We already have a series of error cases handled for SSL handshake, but 
they are pre-defined by OpenSSL and they do not speak on where they 
failed,

err = SSL_accept((SSL *)SockObj->SSLCtx);
if(err<=0){
                err=SSL_get_error((SSL *)SockObj->SSLCtx,err);
                switch(err){
                case SSL_ERROR_NONE:
                case SSL_ERROR_ZERO_RETURN:
                case SSL_ERROR_WANT_READ:
                case SSL_ERROR_WANT_WRITE:
                case SSL_ERROR_WANT_CONNECT:
                case SSL_ERROR_SYSCALL:
                case SSL_ERROR_SSL:
        }
}

Can you shed some lights here ?

Thanks & Regards
________________________
Karthikeyan Thirumal


******************************************************
This message and any files or attachments sent with this message contain 
confidential information and is intended only for the individual named.  If you 
are not the named addressee, you should not disseminate, distribute, copy or 
use any part of this email.  If you have received this message in error, please 
delete it and all copies from your system and notify the sender immediately by 
return Email.

Email transmission cannot be guaranteed to be secure or error-free as 
information can be intercepted, corrupted, lost, destroyed, late, incomplete or 
may contain viruses.  The sender, therefore, does not accept liability for any 
errors or omissions in the contents of this message, which arise as a result of 
email transmission.
******************************************************

Reply via email to