Skip to content

Commit 3ed6604

Browse files
committed
Correct SSL quiet shutdown comment.
1 parent c7d491e commit 3ed6604

File tree

1 file changed

+1
-6
lines changed

1 file changed

+1
-6
lines changed

cdk/foundation/connection_openssl.cc

Lines changed: 1 addition & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -273,12 +273,7 @@ class connection_TLS_impl
273273
if (m_tls)
274274
{
275275
/*
276-
THE SSL standard says that SSL sockets must send and receive a close_notify
277-
alert on socket shutdown to avoid truncation attacks. However, this can
278-
cause problems since we often hold a lock during shutdown and this IO can
279-
take an unbounded amount of time to complete. Since our packets are self
280-
describing with length, we aren't vunerable to these attacks. Therefore,
281-
we just shutdown by closing the socket (quiet shutdown).
276+
Server is expecting a SSL quiet shutdown.
282277
*/
283278
SSL_set_quiet_shutdown(m_tls, 1);
284279
SSL_shutdown(m_tls);

0 commit comments

Comments
 (0)