Re: Reverse ssl

2009-05-19 Thread Kyle Hamilton
Client initiates the TCP connection, Server listens for TCP connection. Client takes on 'TLSServer' role, Server takes on 'TLSClient' role. This does exactly what you're looking to do, without having to change the protocol. (The TLSServer can send a ClientHelloRequest to inform the other side that

Re: Reverse ssl

2009-05-18 Thread Junaid Khokhar
You mean that client should do the encryption?? On 5/19/09, Neetu Agrawal wrote: > Thanks for suggestion but may be i didnt put my query in right way . I want > that client initiate the request and server listen the request but the > roles of server and client get exchanged during the key genrat

Re: Reverse ssl

2009-05-18 Thread Victor Duchovni
On Tue, May 19, 2009 at 09:44:23AM +0530, Neetu Agrawal wrote: > Thanks for suggestion but may be i didnt put my query in right way . I want > that client initiate the request and server listen the request but the > roles of server and client get exchanged during the key genration to > offload th

Re: Reverse ssl

2009-05-18 Thread Neetu Agrawal
Thanks for suggestion but may be i didnt put my query in right way . I want that client initiate the request and server listen the request but the roles of server and client get exchanged during the key genration to offload the server from key decryption operation. On Mon, May 18, 2009 at 11:23 PM

Re: Reverse ssl

2009-05-18 Thread Steffen DETTMER
* Victor Duchovni wrote on Mon, May 18, 2009 at 13:53 -0400: > On Mon, May 18, 2009 at 10:24:55AM -0700, Kyle Hamilton wrote: > > 'reverse SSL'? > > > In other words, the TCP initiator and passive listener are not > necessarily also the SSL client and server respectively. I think stunnel already

Re: Reverse ssl

2009-05-18 Thread Victor Duchovni
On Mon, May 18, 2009 at 10:24:55AM -0700, Kyle Hamilton wrote: > 'reverse SSL'? > > You get the OpenSSL source code from http://www.openssl.org/source/ . > You can 'exchange' the role of client and server by having the client > connect a TCP session to the listener and then passing that descripto

Re: Reverse ssl

2009-05-18 Thread Kyle Hamilton
'reverse SSL'? You get the OpenSSL source code from http://www.openssl.org/source/ . You can 'exchange' the role of client and server by having the client connect a TCP session to the listener and then passing that descriptor to a properly-setup SSL context with SSL_server_method, and the listener