fsecure-kilkanen commented on issue #11758: URL: https://github.com/apache/trafficserver/issues/11758#issuecomment-2343730759
https://github.com/fsecure-kilkanen/kyber-handshaketest/blob/main/kyber-handshaketest.py is a simple Python script that sends a previously recorded TLS Client Hello packet with Kyber cipher to a chosen destination. It sends the client hello packet in two ways: 1. One call to `send()`. This means TCP stack will do TCP segmentation. 2. Client Hello is split into two parts, and the parts are sent separately with slight delay. This simulates what happens in the error case above. Both cases succeed when running directly against a web server. With ATS, first case succeeds depending on network conditions. Second case breaks always, as ATS receives the ClientHello always in two separate socket read calls. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
