RE: SSL_MODE_ENABLE_PARTIAL_WRITE does not work in DTLS

2014-08-22 Thread Brian Hassink
We see the same problem with DTLS over SCTP. In our application, there are messages as large as 60K, so we are interested in knowing if there is a way to send them over DTLS. -Brian -Original Message- From: Iñaki Baz Castillo [mailto:i...@aliax.net] Sent: Thursday, August 21, 2014 1:3

Re: SSL_MODE_ENABLE_PARTIAL_WRITE does not work in DTLS

2014-08-22 Thread Iñaki Baz Castillo
2014-08-22 14:43 GMT+02:00 Brian Hassink : > We see the same problem with DTLS over SCTP. > > In our application, there are messages as large as 60K, so we are interested > in knowing if there is a way to send them over DTLS. I assume you mean "SCTP over DTLS". That's a good point. However I do

RE: SSL_MODE_ENABLE_PARTIAL_WRITE does not work in DTLS

2014-08-22 Thread Brian Hassink
z Castillo [mailto:i...@aliax.net] Sent: Friday, August 22, 2014 9:06 AM To: openssl-users@openssl.org Subject: Re: SSL_MODE_ENABLE_PARTIAL_WRITE does not work in DTLS   2014-08-22 14:43 GMT+02:00 Brian Hassink mailto:brian.hass...@oracle.com"brian.hass...@oracle.com>: > We see the s

Re: SSL_MODE_ENABLE_PARTIAL_WRITE does not work in DTLS

2014-08-22 Thread Iñaki Baz Castillo
2014-08-22 15:28 GMT+02:00 Brian Hassink : > I do mean DTLS/SCTP (RFC6083). > > In our application, we have Diameter (RFC6733) traffic which can involve > large messages. OK, got it. In my case is SCTP over DTLS (WebRTC DataChannel), but the underlying problem is the same (both UDP and SCTP are me

Re: SSL_MODE_ENABLE_PARTIAL_WRITE does not work in DTLS

2014-08-31 Thread Iñaki Baz Castillo
It is sad to know that this question will never be replied by the OpenSSL developers. May I know what I should do? I am not sure whether this is a bug or not, should I report it as a bug? If so, how? The OpenSSL homepage provides NO WAY to report a bug. This project really annoys me. 2014-08-21 1

Re: SSL_MODE_ENABLE_PARTIAL_WRITE does not work in DTLS

2014-08-31 Thread Iñaki Baz Castillo
Found it, and mail sent to r...@openssl.org. 2014-08-31 14:34 GMT+02:00 Iñaki Baz Castillo : > It is sad to know that this question will never be replied by the > OpenSSL developers. May I know what I should do? I am not sure whether > this is a bug or not, should I report it as a bug? If so, how?

RE: SSL_MODE_ENABLE_PARTIAL_WRITE does not work in DTLS

2014-08-31 Thread Salz, Rich
The website isn't great, and it's not immediately obvious where to email bug reports. It's one of the things we're working on. I don't know if you can do partial writes over UDP. You might look at section 4.1 of this original paper: https://crypto.stanford.edu/~nagendra/papers/dtls.pdf :��I

Re: SSL_MODE_ENABLE_PARTIAL_WRITE does not work in DTLS

2014-08-31 Thread Viktor Dukhovni
On Sun, Aug 31, 2014 at 09:34:50AM -0400, Salz, Rich wrote: > I don't know if you can do partial writes over UDP. You might > look at section 4.1 of this original paper: > https://crypto.stanford.edu/~nagendra/papers/dtls.pdf It seems fairly obvious to me that partial writes don't make sense for

Re: SSL_MODE_ENABLE_PARTIAL_WRITE does not work in DTLS

2014-08-31 Thread Michael Tuexen
On 31 Aug 2014, at 14:34, Iñaki Baz Castillo wrote: > It is sad to know that this question will never be replied by the > OpenSSL developers. May I know what I should do? I am not sure whether > this is a bug or not, should I report it as a bug? If so, how? The > OpenSSL homepage provides NO WAY

Re: SSL_MODE_ENABLE_PARTIAL_WRITE does not work in DTLS

2014-08-31 Thread Iñaki Baz Castillo
Thanks to all for your useful replies. Comments inline: 2014-08-31 19:14 GMT+02:00 Michael Tuexen : >>> It does not work. I call SSL_write() by passing a very long data >>> (65536) and it still returns -1. So, in case I want to write a big >>> data over a DTLS UDP connection, how can I do that? I