Hi all,
I have a need to perform SSL encryption/decryption on a separate machine
than the one used for performing SSL handshake. Let machine A be the former
one and machine B the latter one.
so, client communicates with machine B, B performs a SSL handhsake with the
client. Machine B then transfers the "session key or secret key used for
encryption" along with other details (like names of algorithms, etc. chosen
for the ssl session) to machine A. All the client requests are transparently
redirected to machine A and thus machine A has an opportunity to encrypt
/decrypt the SSL traffic (as man-in-the-middle). I have 2
implementation-specific questions:
1. What would be the API to use to extract session key information from
machine B's ssl engine/context?
2. How do I use SSL crypto APIs to use the key to encrypt/decrypt SSL
application data on machine A?
Thanks.
_________________________________________________________________
Real Estate classifieds on MSN - for free.www.yello.in
http://www.yello.in/home.php?utm_source=hotmailtag&utm_medium=email&utm_content=in&utm_campaign=jun
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]