On Mon, Dec 21, 2009 at 08:49:59PM +1100, Russell Coker wrote:
> On Mon, 21 Dec 2009, Simon Horman <ho...@verge.net.au> wrote:
> > I'm quite happy to consider replacing openssl with GNUTLS.
> > Although I don't know if it would solve the problem at hand
> > nor how many bonus problems it might create.
> 
> My past experience is that converting from OpenSSL to GNUTLS is not THAT 
> difficult, but maintaining a code base to support both via autoconf is quite 
> painful.  But I haven't done anything as intense as you in this regard.

Hopefully GNUTLS could just replace OpenSSL.
Having both available as a compile-time switch sounds painful.

> http://www.opengroup.org/onlinepubs/000095399/functions/setsockopt.html
> 
> The above URL documents how to use the SO_RCVTIMEO and SO_SNDTIMEO options of 
> setsockopt().
> 
> http://74.125.153.132/search?q=cache:rEDEp2tvku8J:article.gmane.org/gmane.network.gnutls.general/227+GNUTLS_E_AGAIN+timeout&cd=9&hl=en&ct=clnk
> 
> The above URL states that the way to set timeouts on the GNUTLS handshake 
> (and 
> presumably other GNUTLS library calls) is to use setsockopt().
> 
> I expect that you can use setsockopt() with OpenSSL too.  While it's pretty 
> stupid to not have a simple timeout parameter for a function call such as the 
> ones we are discussing, it would be totally stupid to have no way at all of 
> specifying a timeout other than SIGALRM.

Thanks for the pointers, I'll poke and see if that works for the
problem at hand.



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to