ssl setup problem (contd.)

Chandrashekhar Mullaparthi chandrashekhar.mullaparthi@REDACTED
Tue Jul 5 10:07:15 CEST 2005


Hi,

I don't have a solution for your problem but I can suggest an 
alternative.

Unless you can really think of a reason to have SSL handling within the 
erlang node (like getting access to client certificates), consider 
using stunnel which is available from http://stunnel.org

You get several advantages doing it this way.

- SSL handling is done in separate UNIX process so you can take 
advantage of a multi-CPU machine if you have one.
- stunnel is quite mature and works pretty well. I haven't used it 
under a heavy load but there are other systems in our network which use 
this for pretty heavy duty stuff.

One down side is that you then can't fit it into the OTP release 
framework. A way around it is to write a wrapper application which 
launches stunnel and monitors it.

cheers
Chandru

On 5 Jul 2005, at 06:36, luvish satija wrote:

> hello all,
>    I explained in my last few mails about my endeavour
>  to set up ssl for erlang ( R10B and ssl ver. 3.0.5)
> on linux. But still I have reached nowhere.
>    So, I have tried to set up ssl on an old version of
> erlang ( R8B and ssl ver 2.3.3). When i start erl
> shell with suitable flags then the following is the
> scenario:
> (the flags are -proto_dist, -boot, -ssl_dist_opt
> client_certfile, -ssl_dist_opt server_certfile, with
> proper arguements)
>
>
> Erlang (BEAM) emulator version 5.1 [source]
>
> Eshell V5.1  (abort with ^G)
> 1> whereis(ssl_server).
> <0.32.0>
>>>>>> this shows that ssl server is started.
>
> 2> {ok, Socket}=ssl:listen(4000,[binary]).
> {ok,{sslsocket,4,<0.37.0>}}
>
>>>>>>> this shows that ssl socket is created at port
> 4000
> 3> ssl:accept(Socket).
> {error,ebadf}
>
>>>>>>> but why this error is coming when i'm using
> sslsocket type.
>
>   Do i need to do something else other than these
> obvious steps ( i'm going on the same lines as that of
> gen_tcp)? I apologize for such frequent posts about my
> doubts, but I am trying to work up this ssl thing from
> last week without any good results.
> thanks in advance
> /luvish
>
>
>
>
> 		
> _______________________________________________________
> Too much spam in your inbox? Yahoo! Mail gives you the best spam 
> protection for FREE! http://in.mail.yahoo.com
>




More information about the erlang-questions mailing list