Handshake and Appdata cannot be interleaved

[vincenthz]

When a connection is establish, spec allows to receive a new handshake to establish a new record context, and still receive appdata on the current established record context.

Not currently aware of any implementation that would allow to send data when the handshake is in progress.

[chadbrewbaker]

I take it your library wasn't effected by the heart bleed issue? Why they are still implementing TLS in C is beyond me.

[vincenthz]

Yeah that's correct, no heartbleeding here. For the language issue, to be fair on this case, it's not completely the language's fault that openssl doesn't have a small unique abstraction for handling buffers, and instead prefer to do the bound checks in an ad-hoc way sprinkle everywhere in the code with disastrous consequence as we seen. (not that I disagree with using a higher level language)