>         Not so. BIO_read and BIO_write on ssl_bio allow me to get in and out
> plaintext.
> 
> > The sides that you talk about are actually the the 2 BIOs in the BIO
> > pair.
> > These act as buffers for ssl_read/write.
> 
>         Yes, the two BIO interfaces are 'ssl_bio' and 'bio_io'. This leaves me with
> four operations:
> 
>         1) Get decrypted plaintext (from SSL to server) = BIO_read(ssl_bio)
>         2) Get encrypted data (from SSL to socket) = BIO_read(bio_io)
>         3) Hand encrypted data (from socket to SSL) = BIO_write(bio_io)
>         4) Hand plaintext (from server to SSL) = BIO_write(ssl_bio)
> 
>         DS

I was looking at it like this. 

Where do you get decrypted client data for server procseeing? 
>From one of the BIO in the BIO pair.

Where do you get encrypted server data to send to client? 
>From the other BIO in the pair.

I guess the difference is just in our way of looking at it.

Regards,
Amit.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to