[Date Prev][Date Next] [Chronological] [Thread] [Top]

Protocol: PDUs received during TLS closure



Protocol-22 says:

> 4.14.3. Closing a TLS Connection
> 4.14.3.1. Graceful Closure

>    The initiating protocol peer sends the TLS closure alert. If it
>    wishes to leave the LDAP connection intact, it then MUST cease to
>    send further PDUs and MUST ignore any received PDUs until it receives
>    a TLS closure alert from the other peer.

Why must the client ignore received PDUs?  It makes sense for servers,
but clients could have use for them.  At least unsolicited
notifications.

Is this some TLS thing, that the network data is unreliable until TLS
closure is completed?  If so there should not be talk about PDUs at all,
since any sent PDUs may be malformed.

-- 
Hallvard