> Looks like you've solved your problem. I just wanted to point out one
> thing
> though.
>
> The ssl_bio is no side. Its ssl_read and ssl_write would produce plain
> text
> and encrypted text respectively.

        Not so. BIO_read and BIO_write on ssl_bio allow me to get in and out
plaintext.

> The sides that you talk about are actually the the 2 BIOs in the BIO
> pair.
> These act as buffers for ssl_read/write.

        Yes, the two BIO interfaces are 'ssl_bio' and 'bio_io'. This leaves me with
four operations:

        1) Get decrypted plaintext (from SSL to server) = BIO_read(ssl_bio)
        2) Get encrypted data (from SSL to socket) = BIO_read(bio_io)
        3) Hand encrypted data (from socket to SSL) = BIO_write(bio_io)
        4) Hand plaintext (from server to SSL) = BIO_write(ssl_bio)

        DS

> David Schwartz wrote:
>
> > [snip]
> > >       I thought that this meant that 'ssl_bio' would be the
> > > decrypted side and
> > > 'bio_io' would be the encrypted side. However, I send
> encrypted data to
> > > 'bio_io' and that exact same data (still encrypted) is
> > > immediately received
> > > through 'ssl_bio'.
> >
> [snip]
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]
>

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to