Indeed. It should be easy to implement the HTTP TLS upgrade with NSS. You can start your connection with regular NSPR sockets, and then upgrade the socket to TLS with SSL_ImportFD at the time your HTTP engine determines it is needed .

Thanks for the answer! My question was exactly that: can SSL_ImportFD
"upgrade" to SSL "on-the-fly" :)

And another question (related) to this. Is it possible with NSS to setup
a socket to accept both "plain text" and encrypted TLS connections?
Any examples of doing this?

Thanks,
Aleksey Sanin
_______________________________________________
mozilla-crypto mailing list
mozilla-crypto@mozilla.org
http://mail.mozilla.org/listinfo/mozilla-crypto

Reply via email to