Re: Java Applet Client for STUNNEL-fronted server



Richard Maher wrote:
Having said that there is a related topic that you might be able to assist
me with though: -

"The TCP/IP Out-of-band character with Java->SSL->Stunnel."

I know Java can't receive OOB data (except inline) but it can send them and
SSLSocket inherits sendUrgentData() so it's vaguely on topic. The problem I
foresee according to the STUNNEL docs is that unless the OOB character is
in-lined then it will just be ignored. Can anyone confirm this?

SSLv3 seems to mandate that the OOB data be supported (as normal data with a
complete SSL wrapper record) but I can't find anything in the OpenSSL
routines that modify (or inform) an SSL_Read() that it's got the OOB; can
anyone confirm this?

At first glance, I just can't see a problem with STUNNEL/OpenSSL unpacking
the OOB byte and passing it on to the in-the-clear connection (with the
option for *both* inline or OOB) but maybe that's just me?

I would go for a simpler solution.

Either open a second socket connection for this traffic or make
a protocol on the original socket that has both "next data block"
and "urgent interrupt" messages.

Arne
.



Relevant Pages

  • Re: Java Applet Client for STUNNEL-fronted server
    ... foresee according to the STUNNEL docs is that unless the OOB character is ... SSLv3 seems to mandate that the OOB data be supported (as normal data with a ... complete SSL wrapper record) but I can't find anything in the OpenSSL ...
    (comp.lang.java.programmer)
  • Re: NDIS_PACKET_8021Q_INFO
    ... I think for my specific case inspecting the UserPriority from the OOB is ... need to look at DSCP whereas in second case we would. ... populated the OOB data. ...
    (microsoft.public.development.device.drivers)