RE: session renegotiation

2009-05-19 Thread Wayne Feick
Thanks for the quick response, David. I hadn't seen any documentation on BIO_set_ssl_renegotiate_bytes/timeout(), but that sounds like a simpler way to go. If I set them both, do they both reset whenever a renegotiation takes place? Any recommendations on reasonable settings for SSLv3/TLSv1? Re: t

RE: session renegotiation

2009-05-19 Thread David Schwartz
Wayne Feick wrote: > Our server has one background thread constantly calling SSL_read() > to drain incoming data. There are multiple threads generating outgoing > data but all the SSL_write() calls are serialized with a semaphore. > All I/O is blocking. I'm not sure how you could make this work.