Re: SSL_read() never returns an error if client rejects certificate

2001-10-04 Thread Eric Rescorla
Jeremy Smith <[EMAIL PROTECTED]> writes: > > Also, the documentation refers to the concept of a "BIO" all over the places, but >never defines it anywhere that I can find. Is BIO some kind of universally >understood concept that I have only just heard of? In any case, where can I go to >learn

RE: SSL_read() never returns an error if client rejects certificate

2001-10-04 Thread Neff Robert A
Eric, I loved your book. Ordered it from B&N as soon as I saw it. Helped me overcome some early initial mindblocks when first integrating with OpenSSL. For those of you reading this, Erik's book is titled: SSL and TLS - Designing and Building Secure Systems and is published by Addison-Wesley. A

Re: SSL_read() never returns an error if client rejects certificate

2001-10-04 Thread Rich Salz
It's generally not a good idea to post "guesses" to large mailing lists. :) BIO -- basic I/O encapsulation. An implementation technique within OpenSSL that is used for all sorts of IO, including socket, file, memory buffers, etc. They can be chained, paired, etc. It's a virtual base class, in C

RE: SSL_read() never returns an error if client rejects certificate

2001-10-04 Thread Neff Robert A
epted. Chalk one up for Microsoft for server friendliness... ::running..ducking..avoids flying anti-ms objectiles:: -Original Message- From: Rick Tyler [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 04, 2001 12:47 PM To: [EMAIL PROTECTED] Subject: SSL_read() never returns an error if c

Re: SSL_read() never returns an error if client rejects certificate

2001-10-04 Thread Jeremy Smith
> Also, the documentation refers to the concept of a "BIO" all over the places, but >never defines it anywhere that I can find. Is BIO some kind of universally >understood concept that I have only just heard of? In any case, where can I go to >learn about it? BIO is, I think, Basic In/Out F

SSL_read() never returns an error if client rejects certificate

2001-10-04 Thread Rick Tyler
I have implemented a simple SSL server using the latest win32 version of the openssl library which behaves as I expect, EXCEPT that SSL_read() returns 0 (meaning, I must POLL it, which is retarded) as long as my browser (the client I am using) is waiting for me to accept the certificate (bogus