Re: Certificate process in openssl 1.0.2

2015-01-29 Thread Susan Hinrichs
On 1/29/2015 1:16 PM, James Peach wrote: On Jan 27, 2015, at 9:58 AM, Susan Hinrichs wrote: On 1/27/2015 11:12 AM, James Peach wrote: On Jan 27, 2015, at 8:34 AM, Susan Hinrichs wrote: On 1/27/2015 10:30 AM, James Peach wrote: On Jan 27, 2015, at 8:18 AM, Susan Hinrichs wrote: Origi

Re: Certificate process in openssl 1.0.2

2015-01-29 Thread James Peach
> On Jan 27, 2015, at 9:58 AM, Susan Hinrichs > wrote: > > > On 1/27/2015 11:12 AM, James Peach wrote: >>> On Jan 27, 2015, at 8:34 AM, Susan Hinrichs >>> wrote: >>> >>> >>> On 1/27/2015 10:30 AM, James Peach wrote: > On Jan 27, 2015, at 8:18 AM, Susan Hinrichs > wrote: > >>

Re: Certificate process in openssl 1.0.2

2015-01-29 Thread Susan Hinrichs
TLS option but there are others like ALPN so all of them could potential be in one callback. Regards, Roland -Original Message- From: Susan Hinrichs [mailto:shinr...@network-geographics.com] Sent: Tuesday, January 27, 2015 5:34 PM To: dev@trafficserver.apache.org Subject: Re: Certificat

Re: Certificate process in openssl 1.0.2

2015-01-28 Thread Lev Stipakov
shinr...@network-geographics.com] >> Sent: Tuesday, January 27, 2015 5:34 PM >> To: dev@trafficserver.apache.org >> Subject: Re: Certificate process in openssl 1.0.2 >> >> >> On 1/27/2015 10:30 AM, James Peach wrote: >>>> >>>> On Jan 27, 201

Re: Certificate process in openssl 1.0.2

2015-01-27 Thread Susan Hinrichs
potential be in one callback. Regards, Roland -Original Message- From: Susan Hinrichs [mailto:shinr...@network-geographics.com] Sent: Tuesday, January 27, 2015 5:34 PM To: dev@trafficserver.apache.org Subject: Re: Certificate process in openssl 1.0.2 On 1/27/2015 10:30 AM, James Peach

RE: Certificate process in openssl 1.0.2

2015-01-27 Thread Roland Zink
potential be in one callback. Regards, Roland -Original Message- From: Susan Hinrichs [mailto:shinr...@network-geographics.com] Sent: Tuesday, January 27, 2015 5:34 PM To: dev@trafficserver.apache.org Subject: Re: Certificate process in openssl 1.0.2 On 1/27/2015 10:30 AM, James Peach

Re: Certificate process in openssl 1.0.2

2015-01-27 Thread Susan Hinrichs
On 1/27/2015 11:12 AM, James Peach wrote: On Jan 27, 2015, at 8:34 AM, Susan Hinrichs wrote: On 1/27/2015 10:30 AM, James Peach wrote: On Jan 27, 2015, at 8:18 AM, Susan Hinrichs wrote: Originally, I was planning on leaving in plugin support for both the SNI callback and the cert callba

Re: Certificate process in openssl 1.0.2

2015-01-27 Thread James Peach
> On Jan 27, 2015, at 8:34 AM, Susan Hinrichs > wrote: > > > On 1/27/2015 10:30 AM, James Peach wrote: >>> On Jan 27, 2015, at 8:18 AM, Susan Hinrichs >>> wrote: >>> >>> Originally, I was planning on leaving in plugin support for both the SNI >>> callback and the cert callback. But as I r

Re: Certificate process in openssl 1.0.2

2015-01-27 Thread Susan Hinrichs
On 1/27/2015 10:30 AM, James Peach wrote: On Jan 27, 2015, at 8:18 AM, Susan Hinrichs wrote: Originally, I was planning on leaving in plugin support for both the SNI callback and the cert callback. But as I reflect, I question that decision. I think it adds complexity without giving more

Re: Certificate process in openssl 1.0.2

2015-01-27 Thread James Peach
> On Jan 27, 2015, at 8:18 AM, Susan Hinrichs > wrote: > > Originally, I was planning on leaving in plugin support for both the SNI > callback and the cert callback. But as I reflect, I question that decision. > I think it adds complexity without giving more power to the plugin writer. > >

Re: Certificate process in openssl 1.0.2

2015-01-27 Thread Susan Hinrichs
Originally, I was planning on leaving in plugin support for both the SNI callback and the cert callback. But as I reflect, I question that decision. I think it adds complexity without giving more power to the plugin writer. Both callbacks take place at the same point in the handshake. From

Certificate process in openssl 1.0.2

2015-01-27 Thread Susan Hinrichs
Hi All, With 1.0.2 openssl expanded their support of the certificate callback to handle pausing processing during the SSL handshake negotiation. This replaces the functionality I added to the SNI callback in my patch for openssl 1.0.1. With TS-3319, I'm updating the ATS callback logic to su