Hello devs,

we are dealing with a general framework to support the tls extensions
(cf mail sent Sun, 14 Dec 2008 at 16:48:21).

We want to provide tls extensions with an initialization function. Let's
use as example the extension e1.

The problem is on the server side: assume that e1 is initialized during
the SSL_new() function; this brings to:

   a. if the client does not send the extension the server still works
   b. allows legacy applications to take advantage of the extension
without any modification

Let's assume that e1 needs some parameters p1 and p2. We now have 2
possibilities:

   a. extend ssl_ctx_st to include p1 and p2: in this case the
initialization function is called as e1_init(ctx) and therefore access
the ctx and sets the parameters.
   b. e1 provides itself getters/setters for p1 and p2: after calling
SSL_new(ctx) the application MUST call set_p1() and set_p2()

Which is the best approach?

-  
Davide and Emanuele


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to