Hi,
I have a general
question about :
If while in ssl/tls
handshake, one encounters an error, whether to send alert that time only or let
the handshake get complete and then send an alert to the peer for closing the
session..
Consider server
authentication fails on client side, then should client send an alert right now
or waits for the handshake to get complete and later send a alert "close
notify"..
In Openssl, it send
the alert at the moment it gets an error like certificate verification failed,
but Microsoft Secured Channel continues to do handshake and it the application
responsibility to send a close notify alert..
Thanks
Aslam
