Re: SSL timeout

On Mon, May 22, 2023 at 05:30:00PM +0000, Robert T Dunn wrote:

Thanks for the response, Howard.

Even though OpenSSL has an ASYNC option, are you saying not every TLS engine supports async, so you can't add it to LDAP?

Hi Robert, AFAIK at least the private API supports async operation, since that's what lloadd (the load balancer) uses.

If you're seeing blocking behaviour in lloadd that would be a bug and if you can trigger that I would like to see a bug reported on this (except for callbacks into libsasl2 which doesn't support non-blocking operation). Otherwise, maybe have a look how this is accomplished there and propose any changes to the public APIs/their implementation to do this too.

Thanks,