Cory,

Section 7.2.1 of the TLS spec (rfc2246) goes into detail about this, and
Eric Rescorla's book has a complete discussion of what the issues are here.
I believe you get the error from OpenSSL if you receive an TCP FIN *before*
you receive a close_notify alert. The problem is probably in the peer which
you perhaps cannot control. If you close down the SSL connection with
SSL_shutdown(), you will cause a close_notify alert to be sent to the peer
before the TCP FIN.

Now, my question is: what does SSL_set_shutdown() do, how is it different
from SSL_shutdown(), and what do the mode options SSL_SENT_SHUTDOWN and
SSL_RECEIVED_SHUTDOWN do?

_____________________________________
Greg Stark
Ethentica, Inc.
[EMAIL PROTECTED]
_____________________________________



----- Original Message -----
From: "Cory Winter" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, January 24, 2001 10:26 PM
Subject: Re: SSL_ERROR_SYSCALL question (follow up)


> Hi,
>
> I guess what I was wondering was does this just indicate that the peer has
> simply gone away/shutdown? By violation, does this situation actually a
> indicate a protocol error? I'm thinking that its not.
>
> Take care,
> Cory
>
> On Wed, Jan 24, 2001 at 11:13:34PM -0330, Cory Winter wrote:
> > Hi,
> >
> > I am occasionally experiencing an SSL_ERROR_SYSCALL where the result of
> > the SSL_read() was 0. The docs explain that this is most likely due to
> > an EOF that was observed which violates the protocol. I was hoping
> > someone could elaborate on this to maybe give me a clue about what I
> > should look for in my code.
> >
> > Thanks,
> > Cory
> >
> > --
> > Cory Winter                          E-Mail: mailto:[EMAIL PROTECTED]
> > Software Developer                   WWW: http://www.ooc.com/
> > Object Oriented Concepts, Inc.       Phone: (709) 738-3725
> > ______________________________________________________________________
> > OpenSSL Project                                 http://www.openssl.org
> > User Support Mailing List                    [EMAIL PROTECTED]
> > Automated List Manager                           [EMAIL PROTECTED]
>
> --
> Cory Winter                          E-Mail: mailto:[EMAIL PROTECTED]
> Software Developer                   WWW: http://www.ooc.com/
> Object Oriented Concepts, Inc.       Phone: (709) 738-3725
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to