Re: TLS negotiation failure

[Emmanuel Dreyfus <manu@netbsd.org>]

On Thu, Sep 10, 2009 at 07:06:59AM +0200, Emmanuel Dreyfus wrote:
> So connection_read() reports an error from ldap_pvt_tls_accept(), which
> is caused by tls_imp->ti_session_accept(). For OpenSSL, that is
> tlso_session_accept(), which just calls SSL_accept()

I tried looping on SSL_accept() until it succeed, in tlso_session_accept().
It often has to try between 400 and 800 times before getting a 
success.

I suspect a locking issue, or a non blocking I/O thing..

-- 
Emmanuel Dreyfus
manu@netbsd.org