I don't know, it seems can't, because the SSL object is created by SSL_new()
which dynamic allocated memory for the object,

If you view the file ssl.h, you will found the SSL structure definition, it
is complex as it containing many object pointer, so I think it is very hard
to manually allocate shared memory to create the SSL object.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave Peter
Sent: Monday, May 09, 2005 3:17 PM
To: openssl-users@openssl.org
Subject: RE: How to pass SSL connection/object from one process to another?

Shared memory or message queue possibly?

Dave Peter
Senior Software Engineer, Unix Clients
Citrix Systems (R&D) Ltd
Chalfont St Peter, UK
+44 (0)1753 276522
[EMAIL PROTECTED]
www.citrix.com


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of lewislyk
Sent: 09 May 2005 08:05
To: openssl-users@openssl.org
Subject: RE: How to pass SSL connection/object from one process to
another?

The Server is already doing this that could pass file descriptor from
one
process to another, but I wonder when the connection is SSL connection,
it
should pass both SSL object and the connection file descriptor, so the
problem is, how to pass the SSL object to other process?

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave Peter
Sent: Monday, May 09, 2005 2:15 PM
To: openssl-users@openssl.org
Subject: RE: How to pass SSL connection/object from one process to
another?

You can pass file descriptors from once process to another. Stevens
Advance Programming in the Unix Environment chaper 15.3 gives examples
of how to do this. 

                        Hope this helps

Dave Peter
Senior Software Engineer, Unix Clients
Citrix Systems (R&D) Ltd
Chalfont St Peter, UK
+44 (0)1753 276522
[EMAIL PROTECTED]
www.citrix.com

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of lewislyk
Sent: 09 May 2005 06:31
To: openssl-users@openssl.org
Subject: How to pass SSL connection/object from one process to another?

Hi,
    I wrote a server program that containing 3 executable file.
When the main executable file executed, it will execve another 2
executable
file and using pipe to communicate with them.

Main executable = [Request Parser]
Other 2 executable = [Request Handler]

Request handling procedure:
1: The [Request Parser] is listening to new connection, when got new
client
connection, it read the request (text input from client) connection,
then
parse the text and decide which [Request Handler] process it should send
the
connection socket and request content to.

2: When the right [Request Handler] received the "request" and
connection
socket from [Request Parser], then it process the request,

3: Finally, the [Request Handler] output(write) the requesting
content(text)
to connection socket, then pass the connection socket back to [Request
Parser] for keepalive that listen to another request from same client. 

##################################
Now, I want to implement the OpenSSL to the server that encrypt the
communication between the server and client.
Due to performance issue, I don't want to use external process like
stunnel
to encrypt the communication between server and client, I want to add it
directly to the server coding that change read() to SSL_read() and
write()
to SSL_write().


Because upon the handling model, when got new SSL connection from
client,
the [Request Parser] called SSL_accept() and SSL_read(), then pass
connection socket to [Request Handler], I think the [Request Parser]
should
also pass the SSL connection object to [Request Handler], so the
"Request
Handler" could call SSL_write to output the content(text) to the client.

So, how the [Request Parser] share SSL object/connection with the
[Request
Handler] or pass the SSL object connection from to [Request Handler]? So
the
"Request Handler" could correctly using SSL_write and SSL_read to
communicate with client.


   I have been searching the solution on the mailing list in the past
few
days, but no solution is found. Hope someone could reply me and help to
solve the problem.

Thanks a lot!

Horace Li

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to