Re: nonblocking implementation question

2010-12-18 Thread Allon
>> You're looking for a BIO_s_mem. >No, he is looking for BIO_new_bio_pair(3) and SSL_set_bio(3). I have read this thread and others, and it is not clear yet why BIO_new_bio_pair should be preferred over 2 BIO_s_mem's. Anyone knows the answer? Allon -- View this message in context: http://old

Re: SSL_VERIFY_PEER and the presence of client's X509 certificate after the handshake

2010-12-18 Thread Victor Duchovni
On Fri, Dec 17, 2010 at 01:24:40PM -0500, Jeff Saremi wrote: > d1-srvr.c: > int dtls1_accept(SSL *s) > > I cannot be 100% sure what changes on the client or on the server in > between. But the low-level client socket and ssl connections are exactly > the same in both scenarios. Also both use Open

RE: SSL_VERIFY_PEER and the presence of client's X509 certificate after the handshake

2010-12-18 Thread Jeff Saremi
So this is some minor debugging I did to get to this problem. Modified the following methods to add two printf lines: ssl_lib.c: X509 *SSL_get_peer_certificate(const SSL *s) { X509 *r; if ((s == NULL) || (s->session == NULL)) { printf("SSL_get_p