Comments on: Securing XPN’s SSL usage http://www.heikkitoivonen.net/blog/2007/07/14/securing-xpns-ssl-usage/ A Finn in Silicon Valley - Adventures in Technology Fri, 19 Feb 2010 07:33:00 -0800 http://wordpress.org/?v=2.8.6 hourly 1 By: Jedrek http://www.heikkitoivonen.net/blog/2007/07/14/securing-xpns-ssl-usage/comment-page-1/#comment-14235 Jedrek Thu, 30 Jul 2009 06:40:47 +0000 http://www.heikkitoivonen.net/blog/?p=14#comment-14235 Hi, we're trying to use the M2Crypto in an asyncore designed application. We have a problem with closing the SSL Connections from M2Crypto. Is there a simple way to determine that a connection should be closed (like empty data received in case of standard sockets)? We've seen that in pyOpenSSL there is some ZeroReturnError. Is there something similar in M2 (I haven't noticed in my logs any error occuring after each communication)? We've also noticed some 'decryption failed or bad record mac' error messages (we got 350 errors for 600 000 downloaded sites; they seem to occur quite undeterministic)? Do you have maybe any ideas why it may happen (we've tried to use sslv3 only (instead of sslv23), as suggested somewhere on the Internet, but it didn't help)? We're using M2Crypto 0.18 and python 2.4 thanks in advance, regards, Jedrek Hi, we’re trying to use the M2Crypto in an asyncore designed application. We have a problem with closing the SSL Connections from M2Crypto. Is there a simple way to determine that a connection should be closed (like empty data received in case of standard sockets)? We’ve seen that in pyOpenSSL there is some ZeroReturnError. Is there something similar in M2 (I haven’t noticed in my logs any error occuring after each communication)?

We’ve also noticed some ‘decryption failed or bad record mac’ error messages (we got 350 errors for 600 000 downloaded sites; they seem to occur quite undeterministic)? Do you have maybe any ideas why it may happen (we’ve tried to use sslv3 only (instead of sslv23), as suggested somewhere on the Internet, but it didn’t help)?

We’re using M2Crypto 0.18 and python 2.4

thanks in advance,
regards,
Jedrek

]]>