Re: Secure Sockets


"Alun Jones" <alun@xxxxxxxxxxxxx> wrote in message
news:eQBPhn0vHHA.2288@xxxxxxxxxxxxxxxxxxxxxxx
You have to find a way to deal with crypto problems as opposed to
networking problems. That's one big reason why you won't find many class
libraries designed to make secure sockets look "just like" regular
sockets. There are a number of functions that you will need to do that
have no socket equivalent (for instance, closing the SSL session without
closing the TCP connection).

hmmm. In theory a SSL implementation needs to support features like that. In
practice however, there doesnt seem to be that much expense in binding the
ssl session with the tcp session. If either one closes, close the other, and
re-open from scratch.

What I personally find *really* tragic is how easy SSL is to do on Windows
CE. A call to setsockopt before calling connect is all it takes. Ans a call
to WSAIoctl so you can validate the server cert.

I really dont understand why ssl on regular Win32 needs to be harder than
that.


.

Relevant Pages

  • Re: [PATCH 10/19] readahead: state based method
    ... > I mean, sockets, pipes cannot readahead... ... > more sockets than regular files. ... send the line "unsubscribe linux-kernel" in ...
    (Linux-Kernel)
  • Re: [PHP] stream_socket_accept() on an SSL socket
    ... When you "talk" to an SSL server directly with sockets, ... There must be a PHP library which does or a native function. ... Sockets on IIS using SSL has some problems. ...
    (php.general)
  • SSL and CryptoAPI?
    ... I need to add SSL security to a sockets based application. ... I'm trying to figure out whether OpenSSL or the MS CryptoAPI is the way to ... example but with reduced choice of algorithms - is the latter correct? ...
    (microsoft.public.security)
  • Re: secure socket programming
    ... You would have to use a third party library (perhaps the Indy project at ... > to secure server over SSL? ... > almost to the point where I believe that .net framework doesn't have any ... > classes for SSL sockets. ...
    (microsoft.public.dotnet.languages.csharp)
  • =?iso-8859-1?q?Re:_Java_Networking_Frage_-_=FCberwachen_mehrerer_Sockets?=
    ... Windows kann ich auf localhost Schnittstellen sowieso keinen Sniffer ... das ist das Dumme an der Sache - ich muss ja zwei Sockets ... Und von "unten" die Daten an die SSL Schicht weitergeben ...
    (de.comp.lang.java)