Re: Real MTU problems with BIO pair

2020-08-21 Thread Detlef Vollmann
On 2020-08-21 19:48, Benjamin Kaduk wrote: On Fri, Aug 21, 2020 at 05:05:51PM +0200, Detlef Vollmann wrote: On 2020-08-20 21:44, Detlef Vollmann wrote: Is there any way to set the maximum fragment size for DTLS handshake with a BIO pair? One solution is to set the MTU and the int_bio size to

Re: Real MTU problems with BIO pair

2020-08-21 Thread Benjamin Kaduk via openssl-users
On Fri, Aug 21, 2020 at 05:05:51PM +0200, Detlef Vollmann wrote: > On 2020-08-20 21:44, Detlef Vollmann wrote: > > > > Is there any way to set the maximum fragment size for > > DTLS handshake with a BIO pair? > One solution is to set the MTU and the int_bio size to

Re: Real MTU problems with BIO pair

2020-08-21 Thread Detlef Vollmann
On 2020-08-20 21:44, Detlef Vollmann wrote: if I create a BIO pair with   BIO_new_bio_pair(&int_bio, 0, &ext_bio_, 0); then I tried to use SSL_set_mtu(), DTLS_set_link_mtu() and SSL_CTX_set_max_send_fragment(ctx, 1000). None of them gave me an error, but also none of them wor

Real MTU problems with BIO pair

2020-08-20 Thread Detlef Vollmann
Hello, if I create a BIO pair with BIO_new_bio_pair(&int_bio, 0, &ext_bio_, 0); then I tried to use SSL_set_mtu(), DTLS_set_link_mtu() and SSL_CTX_set_max_send_fragment(ctx, 1000). None of them gave me an error, but also none of them worked: the ServerHello was still sent as a singl

Re: [openssl-users] BIO Pair vs Custom BIO for non standard transport

2016-08-29 Thread Matt Caswell
On 29/08/16 14:27, lilulo wrote: > Hi All, > > I need to use TLS on the top of our collection of low-level transport > classes. It looks like the standard choice is to create a BIO Pair and > to manage data transfer between transport layer and the TLS through it. > This loo

[openssl-users] BIO Pair vs Custom BIO for non standard transport

2016-08-29 Thread lilulo
Hi All, I need to use TLS on the top of our collection of low-level transport classes. It looks like the standard choice is to create a BIO Pair and to manage data transfer between transport layer and the TLS through it. This looks fine but actual implementation of a socket's BIO in op

help,IO completion port, bio pair, handshake

2011-05-16 Thread gold ani
hi all i'm a newbie to the openssl and plan to integrate SSL to my server. my server is developed based on IO completion port. so i want to separate the SSL engine from the socket object totally. after googled in mail list, i found it is possible by using BIO pair mechanism . after almos

Any way to force data through a bio pair and SSL encryption?

2009-06-16 Thread Rene Hollan
I have a small problem. I am using a bio pair around one side of the SSL engine (encrypted: network facing) and a BIO wrapper around the other side (decrypted: application facing). I have a "push model" of data: it arrives from the network and from the application, I pipe it through

Re: BIO pair

2001-03-03 Thread David Schwartz
rd there's the plaintext output from the SSL engine that you need to receive from the BIO pair. Fourth, there's the plaintext you want to encrypt and send that you need to send into the BIO pair. In actuality, you should have eight endpoints: 1) The plaintext data you want to enc

Re: BIO pair

2001-03-03 Thread Lutz Jaenicke
On Sat, Mar 03, 2001 at 05:57:49PM +0200, Teemu Piiroinen wrote: > I have tried to use BIO pair and for some reason it doesn't > seem to work right. So, here is the code if someone could > tell me what's going wrong. > > I have tried to make it work without SSL_set_

BIO pair

2001-03-03 Thread Teemu Piiroinen
Hi   I have tried to use BIO pair and for some reason it doesn't seem to work right. So, here is the code if someone could tell me what's going wrong.   I have tried to make it work without SSL_set_fd and SSL_accept, but it won't work.       ssl = SSL_new (ctx);