Re: DTLS connection problems

2013-02-18 Thread T J
OK, I followed the advice documented for the SSL_ERROR_SYSCALL case and since ERR_get_error() returns 0, ended up with this situation : "If *ret == 0*, an EOF was observed that violates the protocol." Disabling the server results in SSL_connect never returning, so I suspect that, when the serv

Re: DTLS connection problems

2013-02-18 Thread Dr. Stephen Henson
On Tue, Feb 19, 2013, T J wrote: > I think it might be my client as SSL_connect() is returning 0. When > I plug that value + the clients' ssl into SSL_get_error(), it > returns a value of 5. strerror(5) returns "Input/output error". Not > much help there! Can anyone point me in the right direction

Re: DTLS connection problems

2013-02-18 Thread T J
I think it might be my client as SSL_connect() is returning 0. When I plug that value + the clients' ssl into SSL_get_error(), it returns a value of 5. strerror(5) returns "Input/output error". Not much help there! Can anyone point me in the right direction to track that down further to find ex

Re: DTLS connection problems

2013-02-18 Thread T J
Well passing the ret value from SSL_get_error() (which is 2) to ERR_error_string() results in: ... error:0002:lib(0):func(0):system lib ... which is a system error isn't it? - hence my reasoning to try using strerror(). Removing the timeout causes the socket to block and then DTLS

RE: DTLS connection problems

2013-02-18 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of David Geib >Sent: Monday, 18 February, 2013 09:45 >You can't use strerror for OpenSSL errors. Look into >ERR_get_error() and ERR_error_string(). After *most* OpenSSL errors. Errors (only) on an underlying I/O operation, in particular a socket

Re: DTLS connection problems

2013-02-18 Thread David Geib
You can't use strerror for OpenSSL errors. Look into ERR_get_error() and ERR_error_string(). I think what's happening with your code is that you set a recv timeout on the listen socket, so you listen for one second and then hit the timeout and the socket returns EWOULDBLOCK/EAGAIN to OpenSSL which

DTLS connection problems

2013-02-17 Thread T J
Hi I'm have some problems getting a client to connect to a server using DTLS. My code is based on Robin Seggelmann's DTLSv1 example at fh-muenster.de. I'm implementing it on a point-point network only (data connection between 2 radios), IP4 over udp so I've stripped it down a bit. In my ser