On 24-Apr-00 12:05:59 GMT, Holger Kruse wrote:
> www.schatztruhe.de is one of the servers that break TLSv1 negotiation.
> You need to set either ENV:MIAMI/SSLVERSION2 or ENV:MIAMI/SSLVERSION3
> to "y". Please see the docs for more information.
I presume the following site is also broken in a similar way?
10.Ram Disk:> miamisslclient -host eshop-sec.sainsburys.co.uk -state
CONNECTED(0)
SSL_connect:before/connect initialization
SSL_connect:SSLv2/v3 write client hello A
SSL_connect:SSLv3 read server hello A
depth=1 /C=US/O=RSA Data Security, Inc./OU=Secure Server Certification Authority
verify return:1
depth=0 /C=GB/L=London/OU=Terms of use at www.trustwise.com/RPA (c)99/OU=Authenticated
by British Telecommunications plc/OU=Member, VeriSign Trust Network/O=J Sainsbury
Plc/OU=Sainsburys To You/CN=eshop-sec.sainsburys.co.uk
verify return:1
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL3 alert write:fatal:bad record mac
SSL_connect:error in SSLv3 read finished A
SSL_connect:error in SSLv3 read finished A
1729012960:error:1408F071:SSL routines:SSL3_GET_RECORD:bad mac decode:s3_pkt.c:384:
If I use the -ssl3 switch, the above error doesn't occur. When the
site is viewed in IBrowse, sometimes images won't download. However, all
works ok when setting SSLVERSION3 to 'y'. This problem is occurring with
both MiamiDx 1.0c and Miami 3.2b.
--
*Oliver Roberts* - Norwich, UK - Software Developer & Web Designer
[EMAIL PROTECTED]/ | [EMAIL PROTECTED]/
http://www.nanunanu.org/~oliver/ - ICQ: 34640231
--
WarpJPEG.datatype ==> http://www.nanunanu.org/~oliver/warpjpeg.html
<tsb>
--
To unsubscribe send "unsubscribe miami-talk-ml" to
"[EMAIL PROTECTED]". For help on list commands send "help" to
"[EMAIL PROTECTED]".
