Re: ssl conn and http

2017-09-27 Thread Alan Carroll
I don't think I'd do it for TLS_CLOSE, but VCONN_CLOSE would likely be worth it. There's an issue on that, linked from the issue I mentioned above. It's about the same thing - plugin wants to attach data during TLS handshake for later retrieval at the HTTP level that can be cleaned up if something

Re: ssl conn and http

2017-09-27 Thread Dk Jack
Yeah, I was thinking along similar lines... Do you think, it'd be a worth while effort to add a ssl-close event hook? On Wed, Sep 27, 2017 at 1:31 PM, Alan Carroll < solidwallofc...@oath.com.invalid> wrote: > I'd probably put a time stamp in and update it during the hook processing. > If you wai

Re: ssl conn and http

2017-09-27 Thread Alan Carroll
I'd probably put a time stamp in and update it during the hook processing. If you waited 5 minutes or so before clearing, that should be enough. If it's been 5 minutes since the last activity the connection should be dead, unless you're shipping big files. Or, alternatively, in READ_REQUEST_HDR_HO

Re: ssl conn and http

2017-09-27 Thread Dk Jack
I did try to see if there was a n openssl hook that gets invoked when the connection is closed. However, I couldn't find one. I guess it doesn't make sense to have one from openssl perspective since connection close is is always initiated by the application. What I need is a i.e a callback from SS

Re: ssl conn and http

2017-09-27 Thread Alan Carroll
Unfortunately I don't know of a reliable way to do clean up, which is one reason I would think of a plugin maintained table which at least has the possibility of cleanup. This does point out a problem with the mentioned issue - if that is done there must be some reliable way to clean it up. I'm no