<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=windows-1252">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 27/05/2016 18:29, Matt Caswell
wrote:<br>
</div>
<blockquote class=" cite" id="mid_574875DE_9050509_openssl_org"
cite="mid:574875DE.9050509@openssl.org" type="cite">
<pre wrap="">
On 27/05/16 16:20, counterpoint wrote:
</pre>
<blockquote class=" cite" id="Cite_6536116" type="cite">
<pre wrap="">Thanks Matt, good points. Not easy to implement though!
In the problem case, my code is the server (it is a proxy), and the standard
MariaDB command line client is the client. Yes, it does look as if
everything is happening as it should, except that the process stops before
all the data has been handled.
The client is sending a large query (about 500 KB, using "load data local
infile '/root/bigdata.txt' into table upload;").
If the client is connected directly to the database, using SSL, the query
runs successfully.
If the client is connected through the proxy without SSL (most of the logic
exactly the same), the query runs successfully.
If a shorter query is chosen, it works with SSL.
Looking at the data flows with Wireshark, it looks about right, but I can't
see the data in detail because of the SSL :)
</pre>
</blockquote>
<pre wrap="">Perhaps using an eNULL ciphersuite might help?
Matt
</pre>
</blockquote>
<tt>For future reference, another way is to load your private <br>
key into WireShark. This works for all but the EDH/ECDH <br>
suites that provide PFS security against enemies who steal <br>
your private key and then decrypt previously recorded <br>
TLS/SSL sessions.</tt><br>
<pre class="moz-signature" cols="72">Enjoy
Jakob
--
Jakob Bohm, CIO, Partner, WiseMo A/S. <a class="moz-txt-link-freetext" href="https://www.wisemo.com">https://www.wisemo.com</a>
Transformervej 29, 2860 Søborg, Denmark. Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded </pre>
</body>
</html>