--- /dev/null
+use strict;
+use warnings;
+do './testlib.pl' || do './t/testlib.pl' || die "no testlib";
+
+$|=1;
+print "1..15\n";
+
+my ($server,$saddr) = create_listen_socket();
+ok( 'listening' );
+
+# first try bad non-SSL client
+my $srv = fork_sub( 'server' );
+fd_grep_ok( 'Waiting', $srv );
+my $cl = fork_sub( 'client' );
+fd_grep_ok( 'Connect from',$srv );
+fd_grep_ok( 'Connected', $cl );
+fd_grep_ok( 'SSL Handshake FAILED', $cl );
+killall();
+
+# then use SSL client
+$srv = fork_sub( 'server','ssl' );
+fd_grep_ok( 'Waiting', $srv );
+$cl = fork_sub( 'client' );
+fd_grep_ok( 'Connect from',$srv );
+fd_grep_ok( 'Connected', $cl );
+fd_grep_ok( 'SSL Handshake OK', $srv );
+fd_grep_ok( 'SSL Handshake OK', $cl );
+fd_grep_ok( 'Hi!', $cl );
+killall();
+
+
+sub server {
+ my $behavior = shift || 'nossl';
+ print "Waiting\n";
+ my $client = $server->accept || die "accept failed: $!";
+ print "Connect from ".$client->peerhost.':'.$client->peerport."\n";
+ if ( $behavior eq 'ssl' ) {
+ if ( IO::Socket::SSL->start_SSL( $client, SSL_server => 1, Timeout => 30 )) {
+ print "SSL Handshake OK\n";
+ print $client "Hi!\n";
+ }
+ } else {
+ while ( sysread( $client, my $buf,8000 )) {}
+ }
+}
+
+sub client {
+ my $c = IO::Socket::INET->new( $saddr ) || die "connect failed: $!";
+ print "Connected\n";
+ if ( IO::Socket::SSL->start_SSL( $c, Timeout => 5 )) {
+ print "SSL Handshake OK\n";
+ print <$c>
+ } else {
+ print "SSL Handshake FAILED - $!\n";
+ }
+}
+
+