It sounds and feels like a stupid question, but when is it actually safe to do a renegotiation? Here's my problem: A client and server exchange lots of messages asynchronously and since the messages are quite large from time to time, there's a buffering mechanism that only sends data after a select said it was OK. At some point the server wants to renegotiate, with my current code I get a "Bad MAC decode", I suppose because the change of mac keys on the server and the client isn't synchronized. So, how do I synchronize this? What conditions must I fulfill to safely send a renegotiate? Martin, who is grateful for all the help he has received on this list -- Martin Sjögren [EMAIL PROTECTED] ICQ : 41245059 Phone: +46 (0)31 405242 Cell: +46 (0)739 169191 GPG key: http://www.strakt.com/~martin/gpg.html ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]