[sr #107495] gnutls_bye() blocks on network issues

anonymous INVALID.NOREPLY at gnu.org
Fri Oct 15 10:07:35 CEST 2010


Follow-up Comment #2, sr #107495 (project gnutls):

This how is the typical TLS session closure works. In TLS the connection
closes if both peers agree on it (very few implementations though do that
right). If you want to set timeout or sockets to non blocking I/O you should
do it to the underlying layer (sockets). You could also non wait for reply
from the peer (by specifying to _WR only flag to _bye) but then you will be
vulnerable to attacks that terminate the connection prematurely.


    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/support/?107495>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/





More information about the Gnutls-devel mailing list