1
0
mirror of https://github.com/nmap/nmap.git synced 2025-12-06 12:41:29 +00:00

Added an item for a new design of nsock SSL

This commit is contained in:
henri
2014-04-08 19:59:13 +00:00
parent df4f3e77b8
commit ac863d6b10

View File

@@ -5,6 +5,9 @@ o Proper SSL support in proxy mode.
exported but it should be implemented just like the other operations. Then exported but it should be implemented just like the other operations. Then
it would be trivial (and clean) for the library to SSLify the channel it would be trivial (and clean) for the library to SSLify the channel
established by the proxy hooks. established by the proxy hooks.
- When redesigning nsock SSL code, keep in mind the ability to establish a SSL
session and still expose the raw TCP. That can be convenient when auditing
the SSL/TLS layer.
o Don't drop pending writes when deleting the corresponding IOD. For nsock to o Don't drop pending writes when deleting the corresponding IOD. For nsock to
behave a bit like standard BSD sockets we should flush writes on close. (OTOH behave a bit like standard BSD sockets we should flush writes on close. (OTOH
anything which isn't ack'ed has no meaning, caller can still cancel it anything which isn't ack'ed has no meaning, caller can still cancel it