> Looks like you've solved your problem. I just wanted to point out one
> thing
> though.
>
> The ssl_bio is no side. Its ssl_read and ssl_write would produce plain
> text
> and encrypted text respectively.
Not so. BIO_read and BIO_write on ssl_bio allow me to get in and out
plaintext.
> The sides that you talk about are actually the the 2 BIOs in the BIO
> pair.
> These act as buffers for ssl_read/write.
Yes, the two BIO interfaces are 'ssl_bio' and 'bio_io'. This leaves me with
four operations:
1) Get decrypted plaintext (from SSL to server) = BIO_read(ssl_bio)
2) Get encrypted data (from SSL to socket) = BIO_read(bio_io)
3) Hand encrypted data (from socket to SSL) = BIO_write(bio_io)
4) Hand plaintext (from server to SSL) = BIO_write(ssl_bio)
DS
> David Schwartz wrote:
>
> > [snip]
> > > I thought that this meant that 'ssl_bio' would be the
> > > decrypted side and
> > > 'bio_io' would be the encrypted side. However, I send
> encrypted data to
> > > 'bio_io' and that exact same data (still encrypted) is
> > > immediately received
> > > through 'ssl_bio'.
> >
> [snip]
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
>
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]