Re^2: Using read/syswrite with IO::Socket::SSL

O.k., boys and girls,

Your contributions made things clearer.

I am not very familiar with SSL, it is not the main task in my project, nevertheless I have to get an SSL-socket to run in non-blocking way.

So, I studied the cited documentation on it and found the following (in the example code):

# with SSL a call for reading n bytes does not result in reading of n
        # bytes from the socket, but instead it must read at least one
+ full SSL
        # frame. If the socket has no new bytes, but there are unproce
+ssed data
        # from the SSL frame can_read will block!

        # wait for data on socket
        $sel->can_read();
[download]

I am a little bit confused. My app must not block, so, if I would integrate the sample code or similar into my while-loop, I COULD run into problems due to a blocking can_read()?

Or am I wrong?

And: If am right, how could I workaround this problem?

Could You please explain the cited text of the documentation in the context of my problem.

Cheers

Bloehdian

Comment on Re^2: Using read/syswrite with IO::Socket::SSL Download Code

Replies are listed 'Best First'.
Re^3: Using read/syswrite with IO::Socket::SSL by noxxi (Pilgrim) on Oct 26, 2016 at 20:07 UTC
If you are using non-blocking sockets you usually have some kind of event loop, i.e. read on the socket only if your event loop triggered the event that the socket is readable. Such an event loop is done by $sel->can_read in case you are using IO::Select. But if you use other event loops like for example kqueue, EV ... the exact syntax of getting the "socket readable" from the event loop differs. The important difference between a normal socket and a SSL socket is that for a normal socket data availability is handled fully inside the OS kernel and the event loop will thus return the data available event if and only if data are available (or socket closed). With SSL sockets instead a large part is handled in user space and due to the SSL framing of data it can happen, that a data available is shown by the OS socket based event loop even though a sysread will not result in any data. This is the case if for example 1500 bytes could be read from the socket but the SSL frame had a size of 6000 bytes, i.e. more data are needed to decrypt the SSL frame and return the data inside sysread. It could also happen, that the event loop does not signal data availability but a sysread would actually return data. This happens for example if you do a sysread of 500 bytes but the SSL frame containing these 500 bytes had actually 1000 bytes in it. In this case the 500 bytes are returned inside the sysread and the rest is kept inside the SSL object in user space. A check against the kernel socket will not show that there are still data available but a check with $ssl->pending will show that there are still data pending inside the SSL object for another sysread.	[reply]
Re^3: Using read/syswrite with IO::Socket::SSL by tybalt89 (Monsignor) on Oct 26, 2016 at 15:21 UTC
A ->can_read(0) does not block, but only do the read if it returns your read filehandle.	[reply]
Re^4: Using read/syswrite with IO::Socket::SSL by Bloehdian (Beadle) on Oct 26, 2016 at 17:31 UTC
O.k., can_read() takes a timeout value as an argument and if that it set to 0, it will not block. I understand. According to the docs it returns a list of handles that are ready for reading. Is it correct that I have to traverse this list and check whether $sock is amongst them to fulfil the condition You stated?	[reply]
Re^5: Using read/syswrite with IO::Socket::SSL by tybalt89 (Monsignor) on Oct 26, 2016 at 17:52 UTC
->can_read(0) will only return handles that have been set into the IO::Select object. Only set those you are interested in. BTW, from the fragment you gave, $sock is your listen socket and is only used for accepts. $client_sock is your read/write socket. typical code fragment: `for my $handle ( $sel->can_read(0) ) { if( $handle == $sock ) { # do accepts here... } elsif( $handle == $client_sock ) { # do sysreads here... } }` [download]	[reply] [d/l]