Using SSL with CRYPT_SESSINFO_NETWORKSOCKET

It appears impossible to use CRYPT_SESSINFO_NETWORKSOCKET with SSL/TLS 
in 3.4.1... the code appears to not allow setting 
CRYPT_SESSINFO_NETWORKSOCKET if CRYPT_SESSINFO_SERVER_NAME is set 
(session/sess_attr.c Lines 725-730) and not allow setting 
CRYPT_SESSINFO_SERVER_NAME if CRYPT_SESSINFO_NETWORKSOCKET us set (Lines 
105-107, called via line 890).  So the second call always returns 
CRYPT_ERROR_INITED.

Since the server name is required for negotiation with TLS 1.1 
(backtrace snippet included), the session fails to activate.  Setting 
CRYPT_SESSINFO_VERSION to 1 permits it to negotiate with just 
CRYPT_SESSINFO_NETWORKSOCKET set, but the session cache will fail at 
session/ssl_kmgmt.c, line 976 due to the missing server name.

#4  0x28a022c6 in __assert () from /lib/libc.so.7
#5  0x285fc2e6 in writeServerName (stream=Variable "stream" is not 
available.) at session/ssl_ext.c:960
#6  0x2861a445 in sMemNullOpen (stream=0xbf9f9c14) at io/memory.c:203
#7  0x285fc336 in writeClientExtensions (stream=0xbf9f9b44, 
sessionInfoPtr=0x28c80a00) at session/ssl_ext.c:994
#8  0x285f8bee in beginClientHandshake (sessionInfoPtr=0x28c80a00, 
handshakeInfo=0xbf9f9dc0) at session/ssl_cli.c:447
#9  0x285f72d9 in commonStartup (sessionInfoPtr=0x28c80a00, isServer=0) 
at session/ssl.c:588


_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.