Hi all,

I have a need to perform SSL encryption/decryption on a separate machine than the one used for performing SSL handshake. Let machine A be the former one and machine B the latter one.

so, client communicates with machine B, B performs a SSL handhsake with the client. Machine B then transfers the "session key or secret key used for encryption" along with other details (like names of algorithms, etc. chosen for the ssl session) to machine A. All the client requests are transparently redirected to machine A and thus machine A has an opportunity to encrypt /decrypt the SSL traffic (as man-in-the-middle). I have 2 implementation-specific questions:

1. What would be the API to use to extract session key information from machine B's ssl engine/context? 2. How do I use SSL crypto APIs to use the key to encrypt/decrypt SSL application data on machine A?

Thanks.

_________________________________________________________________
Real Estate classifieds on MSN - for free.www.yello.in http://www.yello.in/home.php?utm_source=hotmailtag&utm_medium=email&utm_content=in&utm_campaign=jun

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to