118 lines
4.0 KiB
HTML
Executable File
118 lines
4.0 KiB
HTML
Executable File
<?xml version="1.0" ?>
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
<head>
|
|
<title>SSL_clear</title>
|
|
<meta http-equiv="content-type" content="text/html; charset=utf-8" />
|
|
<link rev="made" href="mailto:root@localhost" />
|
|
</head>
|
|
|
|
<body style="background-color: white">
|
|
|
|
|
|
<!-- INDEX BEGIN -->
|
|
<div name="index">
|
|
<p><a name="__index__"></a></p>
|
|
|
|
<ul>
|
|
|
|
<li><a href="#name">NAME</a></li>
|
|
<li><a href="#synopsis">SYNOPSIS</a></li>
|
|
<li><a href="#description">DESCRIPTION</a></li>
|
|
<li><a href="#notes">NOTES</a></li>
|
|
<li><a href="#warnings">WARNINGS</a></li>
|
|
<li><a href="#return_values">RETURN VALUES</a></li>
|
|
<li><a href="#copyright">COPYRIGHT</a></li>
|
|
</ul>
|
|
|
|
<hr name="index" />
|
|
</div>
|
|
<!-- INDEX END -->
|
|
|
|
<p>
|
|
</p>
|
|
<hr />
|
|
<h1><a name="name">NAME</a></h1>
|
|
<p>SSL_clear - reset SSL object to allow another connection</p>
|
|
<p>
|
|
</p>
|
|
<hr />
|
|
<h1><a name="synopsis">SYNOPSIS</a></h1>
|
|
<pre>
|
|
#include <openssl/ssl.h></pre>
|
|
<pre>
|
|
int SSL_clear(SSL *ssl);</pre>
|
|
<p>
|
|
</p>
|
|
<hr />
|
|
<h1><a name="description">DESCRIPTION</a></h1>
|
|
<p>Reset <strong>ssl</strong> to allow another connection. All settings (method, ciphers,
|
|
BIOs) are kept.</p>
|
|
<p>
|
|
</p>
|
|
<hr />
|
|
<h1><a name="notes">NOTES</a></h1>
|
|
<p>SSL_clear is used to prepare an SSL object for a new connection. While all
|
|
settings are kept, a side effect is the handling of the current SSL session.
|
|
If a session is still <strong>open</strong>, it is considered bad and will be removed
|
|
from the session cache, as required by <a href="http://www.ietf.org/rfc/rfc2246.txt" class="rfc">RFC2246</a>. A session is considered open,
|
|
if <em>SSL_shutdown(3)</em> was not called for the connection
|
|
or at least <em>SSL_set_shutdown(3)</em> was used to
|
|
set the SSL_SENT_SHUTDOWN state.</p>
|
|
<p>If a session was closed cleanly, the session object will be kept and all
|
|
settings corresponding. This explicitly means, that e.g. the special method
|
|
used during the session will be kept for the next handshake. So if the
|
|
session was a TLSv1 session, a SSL client object will use a TLSv1 client
|
|
method for the next handshake and a SSL server object will use a TLSv1
|
|
server method, even if TLS_*_methods were chosen on startup. This
|
|
will might lead to connection failures (see <em>SSL_new(3)</em>)
|
|
for a description of the method's properties.</p>
|
|
<p>
|
|
</p>
|
|
<hr />
|
|
<h1><a name="warnings">WARNINGS</a></h1>
|
|
<p><code>SSL_clear()</code> resets the SSL object to allow for another connection. The
|
|
reset operation however keeps several settings of the last sessions
|
|
(some of these settings were made automatically during the last
|
|
handshake). It only makes sense for a new connection with the exact
|
|
same peer that shares these settings, and may fail if that peer
|
|
changes its settings between connections. Use the sequence
|
|
<em>SSL_get_session(3)</em>;
|
|
<em>SSL_new(3)</em>;
|
|
<em>SSL_set_session(3)</em>;
|
|
<em>SSL_free(3)</em>
|
|
instead to avoid such failures
|
|
(or simply <em>SSL_free(3)</em>; <em>SSL_new(3)</em>
|
|
if session reuse is not desired).</p>
|
|
<p>
|
|
</p>
|
|
<hr />
|
|
<h1><a name="return_values">RETURN VALUES</a></h1>
|
|
<p>The following return values can occur:</p>
|
|
<ol>
|
|
<li>
|
|
<p>The <code>SSL_clear()</code> operation could not be performed. Check the error stack to
|
|
find out the reason.</p>
|
|
</li>
|
|
<li>
|
|
<p>The <code>SSL_clear()</code> operation was successful.</p>
|
|
</li>
|
|
</ol>
|
|
<p><em>SSL_new(3)</em>, <em>SSL_free(3)</em>,
|
|
<em>SSL_shutdown(3)</em>, <em>SSL_set_shutdown(3)</em>,
|
|
<em>SSL_CTX_set_options(3)</em>, <em>ssl(7)</em>,
|
|
<em>SSL_CTX_set_client_cert_cb(3)</em></p>
|
|
<p>
|
|
</p>
|
|
<hr />
|
|
<h1><a name="copyright">COPYRIGHT</a></h1>
|
|
<p>Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.</p>
|
|
<p>Licensed under the Apache License 2.0 (the "License"). You may not use
|
|
this file except in compliance with the License. You can obtain a copy
|
|
in the file LICENSE in the source distribution or at
|
|
<a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
|
|
|
|
</body>
|
|
|
|
</html>
|