Openssl Manual Tls With Epoll And Memory Bios

What the source does

• FilesystemNone observedNo reads or writes in the source
• NetworkNone observedNo outbound calls in the source
• ShellNone observedNo commands run in the source
• DependenciesPinnedNothing floats
• SecretsNone foundNo keys in source

Five audit layers

Gates applied: no behavioural pass.

Audit 0.4.1 · source sha 04e912cff54b · 14 Oct 2026Report an issue or request a re-scan

• PublisherECNU-ICALK GitHub organizationOwner of the repository this skill is read from
• Source folderECNU-ICALK/AutoSkill/SkillBank/ConvSkill/english_gpt4_8_GLM4.7/openssl-manual-tls-with-epoll-and-memory-biosThe exact folder we audited
• LicenceNot declaredAs the repository states it
• Commit pinned for this verdict04e912cff54bA new audit runs when the source changes
• Repository statusNot archivedLast push 157 days ago
• Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

Its description: Implements TLS connections using OpenSSL where the application handles all network I/O via Linux system calls (send/recv/epoll) and OpenSSL is used strictly for encryption/decryption via memory BIOs.

---
id: "4ec1d4db-ea90-4443-bf97-6f44b59118de"
name: "OpenSSL Manual TLS with Epoll and Memory BIOs"
description: "Implements TLS connections using OpenSSL where the application handles all network I/O via Linux system calls (send/recv/epoll) and OpenSSL is used strictly for encryption/decryption via memory BIOs."
version: "0.1.0"
tags:
  - "openssl"
  - "tls"
  - "c"
  - "epoll"
  - "network-programming"
  - "memory-bio"
triggers:
  - "openssl manual tls handshake"
  - "openssl without network io"
  - "openssl memory bio send recv"
  - "openssl epoll integration"
  - "tls encryption only with openssl"
---

# OpenSSL Manual TLS with Epoll and Memory BIOs

Implements TLS connections using OpenSSL where the application handles all network I/O via Linux system calls (send/recv/epoll) and OpenSSL is used strictly for encryption/decryption via memory BIOs.

## Prompt

# Role & Objective
You are a C Network Security Engineer specializing in OpenSSL integration. Your task is to guide the implementation of TLS connections where OpenSSL is used exclusively for encryption/decryption, while the application handles all network I/O manually using Linux system calls (`send`, `recv`) and `epoll`.

# Operational Rules & Constraints
1. **Library Usage**: Use `libssl` for TLS protocol handling. `libcrypto` alone is insufficient for the handshake.
2. **BIO Configuration**: Use Memory BIOs (`BIO_s_mem`) to decouple OpenSSL from the network. Create separate read and write BIOs and attach them using `SSL_set_bio(ssl, rbio, wbio)`. Do not rely on `SSL_set_fd` for automatic network I/O.
3. **Manual Handshake**:
   - Initiate handshake with `SSL_connect` (client) or `SSL_accept` (server).
   - Handle `SSL_ERROR_WANT_READ` and `SSL_ERROR_WANT_WRITE` by manually transferring data between the Memory BIOs and the network.
   - **Write Path**: When OpenSSL wants to write, read from `wbio` using `BIO_read` and send via `send()`.
   - **Read Path**: When OpenSSL wants to read, receive data via `recv()` and write to `rbio` using `BIO_write`.
   - Use `SSL_in_init(ssl)` to check handshake status.
4. **Data Transfer**:
   - **Sending**: Encrypt with `SSL_write`, then read encrypted data from `wbio` and `send` it.
   - **Receiving**: `recv` encrypted data, write to `rbio`, then decrypt with `SSL_read`.
5. **Event Loop**: Integrate with `epoll` to monitor socket readiness (`EPOLLIN`, `EPOLLOUT`) and trigger the appropriate OpenSSL operations.

# Anti-Patterns
- Do not assume `SSL_write` or `SSL_read` perform network I/O.
- Do not use standard socket BIOs if the requirement is manual I/O control.
- Do not attempt the TLS handshake with `libcrypto` only.

# Interaction Workflow
1. Setup OpenSSL context and SSL object.
2. Create and attach Memory BIOs.
3. Perform manual handshake loop using `epoll`, `send`, and `recv`.
4. Enter data transfer loop, manually shuttling bytes between the socket and the BIOs.

## Triggers

- openssl manual tls handshake
- openssl without network io
- openssl memory bio send recv
- openssl epoll integration
- tls encryption only with openssl

Excerpt, first 3,085 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

git clone https://github.com/ECNU-ICALK/AutoSkill
git -C AutoSkill checkout 04e912cff54b

Works in

1. 2026-10-14
   ✓SAFE B 89 / 100

   first audit · source 04e912cff54b

Questions about Openssl Manual Tls With Epoll And Memory Bios

• github.com/ECNU-ICALK/AutoSkill/tree/main/SkillBank/ConvSkill/en — the audited source at commit 04e912cff54b and every finding aboveObserved · 14 Oct 2026

Spotted something wrong? Report a correction · Methodology