Hi all,

Fixed in 2.0.1_RC0.7.01

The following could be happen if https was used for the GUI or SSL/TLS was 
used for SMTP:
- the GUI is shown incomplete
- submitting any changes in the GUI results in a waiting or empty browser 
window
- SMTP SSL/TLS connections are unexpected dropped in the middle of a 
transmission

The reason for this was a requested SSL-re-handshake from the peer 
(browser or SMTP). The result was a non-readable and/or non-writable state 
of the connection, which causes ASSP to assume that the connection was 
closed by the peer (read zero bytes). This special state of a SSL 
connection is now detected and handled by ASSP.
An other reason for this behavior was the read of too less bytes (less 
than available) from the systems IO-buffer. On a SSL-re-handshake request 
of the peer, ASSP was some times unable to read the rest of the available 
data from the IO-buffer. ASSP tries now every time to read the maximum 
(16384) or the pending size of data from the IO-buffer.
Until a SSL-re-handshake request is pending at the SSL-librarys and the 
SMTP session-timeout is not reached, ASSP will not close the connection.

Thomas


DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************


------------------------------------------------------------------------------
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to