On 13/03/2013 14:55, Mladen Turk wrote: > On 03/13/2013 03:25 PM, Mark Thomas wrote: >> On 13/03/2013 14:07, Mladen Turk wrote: >>> >>> Sending you a version that returns APR_EGENERAL on SLL_ERROR_SSL ... >> >> Thanks. That fails fast which is good but still fails. Fundamentally we >> need to be able to handle the situation when we have some, but not >> enough data for OpenSSL. >> > > BTW, looking at some OpenSSL examples, whenever SSL_ERROR_SSL is returned > it usually means connection needs to get recycled (closed). > Perhaps we should check for a reason SSL_ERROR_SSL is returned cause that > doesn't look like a normal thing.
Thanks for the updated debug dll. Results (from the last good write to when it fails follow). [880] ssl_socket_send 8192 bytes with timeout -1 [880] SSL_write wrote 8192 bytes [880] ssl_socket_send 4 bytes with timeout -1 [880] SSL_write returned -1, apr_get_netos_error=730035 SSL_get_error=3 [880] ssl_socket_send 4 bytes with timeout -1 [880] SSL_write returned -1, apr_get_netos_error=0 SSL_get_error=1 [880] SSL_ERROR_SSL error in queue=336195711 [880] bad write retry --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org