Ssl

Ruby
1

Hi,

I have a client-server application that communicates on a TCP channel.
The goal is to “upgrade” the connection at a certain point to SSL, but
only after a few messages sent without encryption.

Is it somehow possible to use an already existing io object and start an
SSL hangshake on it?

u.

2

On 4/13/2013 12:18 PM, Nokan E. wrote:

Is it somehow possible to use an already existing io object and start an
SSL hangshake on it?

u.
I will be glad to hear about an option like that.

3

On Apr 13, 2013 4:19 AM, “Nokan E.” [email protected] wrote:

u.

I don’t know whether any of the std lib or gems do such, but SSL/TLS
runs
on top of TCP, so it’s technically possible…

4

From a TCP perspective you will have to make a new connection. New 3 way
handshake and all etc…

On Sat, Apr 13, 2013 at 2:55 PM, tamouse mailing lists <

5

Your control channel can just negotiate with the client. IF both sides
agree a new SSL connection can be built. We use this method for my
employer
in streaming.

6

In the same TCP session?

7

On 4/14/2013 1:36 AM, Cliff R. wrote:

Your control channel can just negotiate with the client. IF both sides
agree a new SSL connection can be built. We use this method for my
employer in streaming.
The idea is to start SSL on the same existing channel which reduce the
need for new overhead.
it is possible with OpenSSL libs in a very low level code.

IN squid there is such thing in progress.

Eliezer