FQDN verification in certificates

2007-06-21 Thread Soji VP
Hi all, I'm using openssl with my application; I'd like to add the 5th optional step (to avoid man-in-the-middle-attack) in my tls negotiation by ensuring the FQDN presents in the certificate with the actual fqdn of the sender. 1) Please suggest me a way to extract subject name in FQDN

RE: SSL_write and SSL_read

2007-04-12 Thread Soji VP
Hi David, Thanks for your sound replay :) I'll take care of this caveat in action... I understand that the same scenario would be applicable in the case of multiple threads handling the same fd even though we managed to get it synchronized using some mutex. Please correct me if I'm wrong :)

SSL_write and SSL_read

2007-04-10 Thread Soji VP
Hi Friends, I've an application which supports TLS communication in which, socket descriptors are handled in threads. Let's take an arbitrary socket descriptor fd and here we go, Can I send data through fd using SSL_write() if I'm in the middle of reading the data from the same fd?