On 08/12/01 07:32 AM, Avery Fay sat at the `puter and typed:
> Hello,
>
> I've been given a task that a previous employee at our company was
> unable to accomplish. Before I start I would like to ask if it is even
> possible.
>
> What I need to do:
>
> 1.) start a ssl session
> 2.) send / receive some data
> 3.) stop that session but keep the tcp / ip connection open
> 4.) start a new ssl session using that tcp / ip connection
> 5.) send / receive more data
> 6.) close the connection
>
> Both sides of the connection will know when to start the new ssl
> session. The reason I need to do this is somewhat complicated, but a
> hard requirement is that I have to keep the tcp / ip connection open and
> I must start a new ssl session. Can this be done? Are there any problem
> areas that I may run into? Thanks for your time and please CC me because
> I am not subscribed to the list (but may be soon if this is possible).
>
> Avery Fay
>
How about SSL_renegotiate()? Check the archives over the last week,
Eric Rescorla dealt with a rehandshaking question recently, and
mentioned an article he is working on for Linux Journal. If it can be
done, I'd imagine that is the way to do it.
HTH
Lou
--
Louis LeBlanc [EMAIL PROTECTED]
Fully Funded Hobbyist, KeySlapper Extrordinaire :)
http://acadia.ne.mediaone.net Ô¿Ô¬
We can defeat gravity. The problem is the paperwork involved.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]