TLS closure and outstanding operations

[Hallvard B Furuseth <h.b.furuseth@usit.uio.no>]

[Protocol] 4.13.3.1 (Graceful Closure) says:
>   Before closing a TLS connection, the client MUST either wait for any 
>   outstanding LDAP operations to complete, or explicitly abandon them. 

If this is because there can be protocol trouble if there are
outstanding operations on the wire during the TLS closure, this doesn't
help: Abandon operations need not be honored, so the abandoned
operations may send respones anyway.

If that is not the reason, graceful TLS closure could just as well
be defined to abandon outstanding operations itself, just like bind.
Also, if so it should also wait for operations that could not be
abandoned to terminate, if the TLS protocol allows that.

-- 
Hallvard