> Not so. BIO_read and BIO_write on ssl_bio allow me to get in and out
> plaintext.
>
> > The sides that you talk about are actually the the 2 BIOs in the BIO
> > pair.
> > These act as buffers for ssl_read/write.
>
> Yes, the two BIO interfaces are 'ssl_bio' and 'bio_io'. This leaves me with
> four operations:
>
> 1) Get decrypted plaintext (from SSL to server) = BIO_read(ssl_bio)
> 2) Get encrypted data (from SSL to socket) = BIO_read(bio_io)
> 3) Hand encrypted data (from socket to SSL) = BIO_write(bio_io)
> 4) Hand plaintext (from server to SSL) = BIO_write(ssl_bio)
>
> DS
I was looking at it like this.
Where do you get decrypted client data for server procseeing?
>From one of the BIO in the BIO pair.
Where do you get encrypted server data to send to client?
>From the other BIO in the pair.
I guess the difference is just in our way of looking at it.
Regards,
Amit.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]