Re: One last query out about using SSL_CTX_set_quiet_shutdown

2015-02-05 Thread Susan Hinrichs
Actually I got some insight from reading the SSL_shutdown man page https://www.openssl.org/docs/ssl/SSL_shutdown.html. If you enable quiet_shutdown, the SSL_shutdown will always return with success. Otherwise, you may need to call SSL_shutdown multiple times (much as you do with SSL_accept),

One last query out about using SSL_CTX_set_quiet_shutdown

2015-02-05 Thread Susan Hinrichs
I'm trying to close out TS-2941. Because ATS has SSL_CTX_set_quiet_shutdown enabled, it does not send close_notify before shutting down the SSL connection. This does not follow the TLS standard and causes the clients to set RSTs. Can anyone remember why we are explicitly enabling SSL_CTX_se