.NET SslStream doesn't close TSL connection properly.

Question

It doesn't send close_notify alert before closing the connection. How can I send close_notify alert?

Answer 1

It's a bug in .NET's usage of the underlying security API. Note another question by me about being unable to select a specific cypher suite - they really botched up this API wrapper...

Answer 2

only Test it

Answer 3

For the record, SslStream at least in .NET 2.0 also doesn't appear to response to a close_notify from the other side. This means that calling OpenSSL's SSL_Shutdown() properly, i.e. twice - once to initiate the shutdown and again to wait for the response - will hang on the second call.