Thanks Keir, I reorganized the code and did a little more test, it just works. But maybe the best way is to patch pyOpenSSL, or use python built-in SSL support after python 2.5 in the future. And maybe someone (me ;-)) can rewrite the migration protocol based on a more robust framework. Someone already uses it to make papers: http://www.eecs.umich.edu/techreports/cse/2007/CSE-TR-539-07.pdf comments & testing are welcome. thanks zhigang Keir Fraser wrote: > On 8/5/08 13:55, "Zhigang Wang" wrote: > >> After further investigation, I find that I didn't get relocation using >> ssl/tls: the read/write to the pyOpenSSL socket.fileno() will communicate >> without data encrypted. > > Need to be merged with current unstable tip (which is at least changeset > 17589). Note also that 17577 has already made OpenSSL optional, and with > less code movement than your approach. > > -- Keir > > > > _______________________________________________ > Xen-devel mailing list > Xen-devel@lists.xensource.com > http://lists.xensource.com/xen-devel