Re: [Fwd] perl-ldap and multiple start_tls errors

[Graham B. <gb...@po...>]

On Wed, Oct 24, 2001 at 04:13:43PM +0100, Chris Ridd wrote:
> Graham Barr <gb...@po...> wrote:
> > ----- Forwarded message from Todd Woods <tw...@di...> -----
> > 
> > Date: Wed, 24 Oct 2001 09:18:20 -0500 (CDT)
> > To: gb...@po...
> > From: Todd Woods <tw...@di...>
> > Subject: perl-ldap and multiple start_tls errors
> > 
> > 	Couldn't find anything using google on this error so e-mailing
> > you. 8) 
> > 	I can't start more then 1 LDAP bind using start_tls in a perl
> > script.  It errors out from IO::Socket::SSL when issuing start_tls on the
> > subsequent ldap objects event if I do an unbind first.
> > 	Reading under IO::Socket::SSL I noticed that it mentions you can
> > only have one SSL context at a given time.  I've seen scripts (haven't run
> 
> Yeah, I saw that too. I suspect that only having a single SSL context means
> you can only have a single SSL connection at a time.

IO::Socket::SSL does create a new context each time, but it stores it in
a global. I wonder it the problem is that on the second connect the
refcount for the first context goes to zero and it is freed, thus causing
problems for Net::SSLeay on the inital connection.

It may be worth trying to save the contents of $IO::Socket::SSL::SSL_Context_obj,
after calling context_init, in the ldap object.

Graham.