Julien Pierre wrote:
David,

David wrote:

I am writing a program that uses NSS as a proxy for some other
protocols.  I have a mult-threaded single-process app.  It is calling
SSL_ConfigSecureServer in the top thread and in some child theads...
The child thread seems to crash only on Solaris 8 when this is called.
Gdb is claiming it is in the function mul_add().  This same behavior is
not exhibited on Linux where the application runs flawlessly...  Anyone
have any ideas?


SSL_ConfigSecureServer can be called more than once, but not on the same socket. Why would you want to do that ?

SSL_ConfigSecureServer may be called more than one on a single socket for a number of valid reasons, including:

1. To configure the socket to have more than one kind of cert, e.g.
   - an RSA cert
   - a DSA cert
   - an ECC cert
2  To change any of the above types of certs after they've been configured,
   such as at expiration, without shutting down the server.
   (This is a two step process, one call to remove the old ones, and
    a second call to put in the new one.

When using multiple ports, you can call SSL_ConfigSecureServer once for each individual listen socket.

If you need to dynamically change the SSL configuration of one of the ports you are listening on, use the model socket feature of NSS .
See the selfserv code sample on the model socket option for details.
_______________________________________________
mozilla-crypto mailing list
[email protected]
http://mail.mozilla.org/listinfo/mozilla-crypto

Reply via email to