On Feb 25, 2011, at 4:44 PM, Robert Story wrote: > On Fri, 25 Feb 2011 11:54:53 +0100 Robin wrote: > RS> Please try using a patched 1.0.0d tarball on both sides. > > Ok, I'll try to get that this weekend or Monday. > > RS> What do you mean by a packet is "missing"? Is there packet loss on the > RS> network or is DTLS discarding a message? And what is the result? > > I'm not sure, since I've just been running wireshark on the client > side. I'll try to get a dump from both sides. Obviously in some cases > DTLS is getting the message, since it is responding with a ServerHello > (albeit with the wrong sequence number). Hi Robert,
are you trying to establish multiple DTLS connections at the same time? Or just one after the other? Is there some traffic load on the server? > > RS> Is there a retransmission and the handshake continues or does the > RS> handshake fail? > > The ClientHello is always sent three times, and the handshake fails. It looks like the ClientHellos are just retransmissions. The same could be the the ServerHellos. It would make sense, the the Certificate message needs to be fragmented. It would be helpful to have .pcap files from both sides and no packet drops reported from libpcap. Best regards Michael > > > Robert > > -- > Senior Software Engineer > SPARTA (dba Cobham Analytic Soloutions) ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
