Re: Re: at what time must I call SSL_free( ) / SSL_CTX_free( )

2011-02-22 Thread Aro RANAIVONDRAMBOLA
Hello, I would like to know at what time have I to call shutdown ? is there a case I have no choice ( and so I have to shutdown ). In fact, I develop a secure stack between TCP and an application. . So in appli_connect( ), appli_read( ), ... appli_accept( ) are defined like these :

Re:Re: Re: at what time must I call SSL_free( ) / SSL_CTX_free( )

2011-02-22 Thread lzyzizi
The SSL will abort the handshake automatically when something was wrong such as the authentication failure,no shared cipher list,verify callback failure and so on.So i think you shall call the shutdown and free the object when the handshake functions(SSL_do_handshake,SSL_accept,SSL_connect...)

Re: at what time must I call SSL_free( ) / SSL_CTX_free( )

2011-02-16 Thread Aro RANAIVONDRAMBOLA
2) = OK 1) I do not understand when you say I can also call SSL_CTX_use_certificate_file( ) to load another certificate file ... if it fails how can you load another certificate file ? 2011/2/15 lzyzizi lzyz...@126.com What time have you to call SSL_free() and SSL_CTX_free() depends what

Re:Re: at what time must I call SSL_free( ) / SSL_CTX_free( )

2011-02-16 Thread lzyzizi
Sorry, I made you confusing. 1)I just want to say that it depends on your needs to call SSL_CTX_free().For example ,you develop an application that needs user to import the certificate .If the user import the wrong certificate , you may not call SSL_CTX_free to free the SSL_CTX object.You may

at what time must I call SSL_free( ) / SSL_CTX_free( )

2011-02-15 Thread Aro RANAIVONDRAMBOLA
Hello, I 'd like to know at what time have I to call SSL_free( ) and SSL_CTX_free( ) 1) For example, I call SSL_CTX_free( ) when a call to a function which fill in the CTX fails ( SSL_CTX_set_cipher_list( ), SSL_CTX_use_certificate_file( ), ..., SSL_CTX_set_verify( ) ). I am wondering if it is a

Re:at what time must I call SSL_free( ) / SSL_CTX_free( )

2011-02-15 Thread lzyzizi
What time have you to call SSL_free() and SSL_CTX_free() depends what you want to end the SSL/SSL_CTX object's lifecycle.Calling these functions is just likedel the object in C++,which means you don't want the object any more. The failure of calling functions(e.g.SSL_CTX_set_cipher_list( ),