Hello,

I think the "srp" ClientHello extension is being sent incorrectly in
1.0.1 beta 2.

In particular, the extension bytes being sent by OpenSSL are:
  00 0c 00 07 05 61 6c 69 63 65 00

Ie:
extension_type = 000c (srp)
extension_data == length 7
 srp_I = length 5, "alice"
 extra 00 byte ??

I think the following patch should be applied to t1_lib.c line 439:

-    int login_len = MIN(strlen(s->srp_ctx.login) + 1, 255);
+    int login_len = MIN(strlen(s->srp_ctx.login), 255);


Trevor

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to