Hi,
I'm working on putting SSL/TLS session caching into Exim, and I've almost
got it working, borrowing heavily from the mod_ssl dbm caching code.
The problem I'm getting is that when I reuse a session from the client side,
I get this:
Initialised TLS
DBM file record "@192.168.254.1" suggests
"=3b9e064333eaf74126c821672a34c776700552b74b71b509f82984601c51957d" as a
session id record
tls_get_client_session: got session record
"=3b9e064333eaf74126c821672a34c776700552b74b71b509f82984601c51957d" from DBM
file; attempting to reuse session
SSL info: before/connect initialization
SSL info: before/connect initialization
SSL info: SSLv3 write client hello A
SSL info: SSLv3 read server hello B
SSL info: SSLv3 read server hello B
LOG: MAIN
TLS error on connection to arise.sinshack [192.168.254.1] (SSL_connect):
error:140920C5:SSL routines:SSL3_GET_SERVER_HELLO:old session cipher not
returned
AIUI, this error means that the cipher suite in the "server hello" record
was different this time round from when the session was originally
negotiated.
However, I was tracking the handshake with ssldump, and it says this:
* First time round:
1 1 0.2710 (0.0276) C>S Handshake
ClientHello
Version 3.0
cipher suites
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
SSL_RSA_WITH_3DES_EDE_CBC_SHA
SSL_DHE_DSS_WITH_RC4_128_SHA
SSL_RSA_WITH_RC4_128_SHA
SSL_RSA_WITH_RC4_128_MD5
SSL_DHE_DSS_WITH_RC2_56_CBC_SHA
SSL_RSA_EXPORT1024_WITH_RC4_56_SHA
SSL_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA
SSL_RSA_EXPORT1024_WITH_DES_CBC_SHA
SSL_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5
SSL_RSA_EXPORT1024_WITH_RC4_56_MD5
SSL_DHE_RSA_WITH_DES_CBC_SHA
SSL_DHE_DSS_WITH_DES_CBC_SHA
SSL_RSA_WITH_DES_CBC_SHA
SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5
SSL_RSA_EXPORT_WITH_RC4_40_MD5
compression methods
NULL
1 2 0.2958 (0.0247) S>C Handshake
ServerHello
Version 3.0
session_id[32]=
3b 9e 06 43 33 ea f7 41 26 c8 21 67 2a 34 c7 76
70 05 52 b7 4b 71 b5 09 f8 29 84 60 1c 51 95 7d
cipherSuite SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
compressionMethod NULL
1 3 0.2959 (0.0001) S>C Handshake
Certificate
1 4 0.3186 (0.0226) S>C Handshake
ServerKeyExchange
[...]
* Second time round:
1 1 0.2295 (0.0272) C>S Handshake
ClientHello
Version 3.0
resume [32]=
3b 9e 06 43 33 ea f7 41 26 c8 21 67 2a 34 c7 76
70 05 52 b7 4b 71 b5 09 f8 29 84 60 1c 51 95 7d
cipher suites
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
SSL_RSA_WITH_3DES_EDE_CBC_SHA
SSL_DHE_DSS_WITH_RC4_128_SHA
SSL_RSA_WITH_RC4_128_SHA
SSL_RSA_WITH_RC4_128_MD5
SSL_DHE_DSS_WITH_RC2_56_CBC_SHA
SSL_RSA_EXPORT1024_WITH_RC4_56_SHA
SSL_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA
SSL_RSA_EXPORT1024_WITH_DES_CBC_SHA
SSL_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5
SSL_RSA_EXPORT1024_WITH_RC4_56_MD5
SSL_DHE_RSA_WITH_DES_CBC_SHA
SSL_DHE_DSS_WITH_DES_CBC_SHA
SSL_RSA_WITH_DES_CBC_SHA
SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5
SSL_RSA_EXPORT_WITH_RC4_40_MD5
compression methods
NULL
1 2 0.2349 (0.0053) S>C Handshake
ServerHello
Version 3.0
session_id[32]=
3b 9e 06 43 33 ea f7 41 26 c8 21 67 2a 34 c7 76
70 05 52 b7 4b 71 b5 09 f8 29 84 60 1c 51 95 7d
cipherSuite SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
compressionMethod NULL
1 3 0.2349 (0.0000) S>C ChangeCipherSpec
1 4 0.2349 (0.0000) S>C Handshake
1 5 0.2628 (0.0278) C>S Alert
level fatal
value illegal_parameter
1 0.2638 (0.0010) C>S TCP RST
So, according to ssldump, the "cipherSuite" entry in the ServerHello is the
same the second time round. Is it a problem that the client seems to be in
"read server hello B" state twice?
OK, can anyone advise me? Is ssldump really useful for debugging or is there
something I can do with the ssl libs to show more debugging info? I'm using
OpenSSL 0.9.6g (from the Debian package) on both machines.
SRH
--
Steve Haslam Reading, UK [EMAIL PROTECTED]
Debian GNU/Linux Maintainer [EMAIL PROTECTED]
Your heart has been ruptured and it will never heal
To get another heart you'll have to steal [leæther strip]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
