> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of 
> Grace Priscilla Jero
> Sent: Friday, January 12, 2018 07:04


> Whenever a connect is initiated from any client we need to know if it is 
> already connected client or a new client.
>  We are doing this by 
> • creating bio/ssl each time a polling happens on the server fd
> • fetching the peer using BIO_dgram_get_peer after ssl_accept 
> • Comparing it to the internally maintained list of peer

Don't create the BIO immediately. Use getpeername on the socket descriptor and 
check that against the list. Only create a new SSL object and BIO if it's not 
an already-established client.

-- 
Michael Wojcik 
Distinguished Engineer, Micro Focus 


-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Reply via email to