Hi all.
I'm now making SSL-Client program, but it doesn't work
yet.
This program support just only SSL_RSA_EXPORT_WITH_RC4_40_MD5.
I sent "Client's Finished Handshake", The server(NT4.0SV)
seid Ack on TCP packet.(good!)
But when I sent HTTP request, the server said Fin.(NG!)
So I check
http://home.netscape.com/eng/ssl3/traces/trc-clnt-ex.html
infomations.
"Client's Finished Handshake"
2b f9 8d ca f3 18 6a 1a bd 9c 1f 99 f9 b5 bd 55
9a 5b 4d 42 71 79 bb 80 59 12 d8 be fc 9a a3 c1
74 3b 00 e8
append MAC(yes! I can calcurate it well)
d3 09 de 28 84 a7 07 5c 7c 0c 08 85 6b 4f 63 04
try to RC4 encrypt, use below key
final_client_write_key:
32 10 cd e1 d6 dc 07 83 f3 75 4c 32 2e 59 96 61
Do encrypt(RC4)!
YES! I can got
ed 37 7f 16 d3 11 e8 a3 e1 2a 20 b7 88 f6 11 f3 a6
7d 37 f7 17 ac 67 20 b8 0e 88 d1 a0 c6 83 e4 80 e8
c7 e3 0b 91 29 30 29 e4 28 47 b7 40 a4 d1 3c da 82
b7 b3 9f 67 10
as same as the example.
Next, I try to make HTTP request encrypt(RC4)
"Client Application Data Record"
47 45 54 20 2f 62 61 72 20 48 54 54 50 2f 31 2e GET /bar HTTP/1.
30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 4b 0..Connection: K
65 65 70 2d 41 6c 69 76 65 0d 0a 55 73 65 72 2d eep-Alive..User-
41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34 Agent: Mozilla/4
2e 30 32 20 5b 65 6e 5d 20 28 57 69 6e 4e 54 3b .02 [en] (WinNT;
20 49 29 0d 0a 48 6f 73 74 3a 20 62 69 6a 6f 75 I)..Host: bijou
2e 6d 63 6f 6d 2e 63 6f 6d 3a 31 39 39 39 0d 0a .mcom.com:1999..
41 63 63 65 70 74 3a 20 69 6d 61 67 65 2f 67 69 Accept: image/gi
66 2c 20 69 6d 61 67 65 2f 78 2d 78 62 69 74 6d f, image/x-xbitm
61 70 2c 20 69 6d 61 67 65 2f 6a 70 65 67 2c 20 ap, image/jpeg,
69 6d 61 67 65 2f 70 6a 70 65 67 2c 20 2a 2f 2a image/pjpeg, */*
0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61 67 ..Accept-Languag
65 3a 20 65 6e 2d 55 53 2c 65 6e 2d 47 42 2c 65 e: en-US,en-GB,e
6e 0d 0a 41 63 63 65 70 74 2d 43 68 61 72 73 65 n..Accept-Charse
74 3a 20 69 73 6f 2d 38 38 35 39 2d 31 2c 2a 2c t: iso-8859-1,*,
75 74 66 2d 38 0d 0a 0d 0a utf-8....
append MAC(also it can make well)
4b 2d 6c 5e 5c 1b bd d7 26 56 57 27 43 b8 c8 7c
try to RC4 , use below key(same as above)
final_client_write_key:
32 10 cd e1 d6 dc 07 83 f3 75 4c 32 2e 59 96 61
Do encrypt(RC4)!
NG!
the exsample sey
7e 59 03 09 da 34 05 c3 76 18 15 c8 87 e3 fb 81
51 dd 7d 82 6b 4a d1 ff 75 b1 3e 72 ac d5 62 c7
29 8a b0 0b a9 ec 5e 0d a9 6e cd 92 28 32 2e 05
be 30 8e 7d 56 67 01 11 ec 2e 2f ab ea bd e1 61
e2 ff d1 aa c3 d6 80 bb c1 8e 82 04 82 eb 62 be
21 17 99 c9 6a fa 9d 60 3c ca f4 30 48 96 9a 71
44 2d e4 1d 1d eb 0f 07 cb 12 a4 cb bc d4 72 de
6d d6 53 8c 33 f9 9b 8e 1c 55 74 83 9c cb a9 91
69 4d 93 f2 93 80 ae c9 9e 9e 4b 88 42 17 57 e3
90 80 df f3 75 5d 49 d3 dc 67 53 2a 06 f4 32 6c
71 6c c6 98 ed 8c 9f aa b6 ce 0d 17 4c a4 b9 f8
a7 73 87 f0 8b c3 23 2f 0e df cc 5e 56 4a 7e 15
12 38 a9 5b 90 f8 08 bc 94 1f f3 22 e4 01 16 40
5c d6 e6 dd 50 18 f8 1d ec 7b 14 b8 e1 d1 5f a9
ff af f9 58 98 f5 29 b2 82 69 df 02 c6 6a f4 3f
6a 79 10 dc 3b cd 50 18 e4 4e 88 c5 5c 33 e3 3f
10 8c 00 ca bf 8b f6 5d 04
but I got
BE 72 2B 12 0E 33 99 EE B5 01 9E 0B A2 FE 03 8B
C9 29 3A 66 DB BB 54 F2 50 EE 3A 71 34 09 BB 8D
F0 F6 45 84 DC AF DA 48 9F E0 FC 3A 40 82 D1 A0
01 B1 EF 5C AC EA 24 59 56 66 3E 45 99 37 4B 85
78 60 73 BC 8C A9 A4 F2 41 F8 20 A8 6A 6A EB A1
36 8C 7E 10 C8 A7 2D FF 38 D5 E0 44 81 EA 58 0E
E2 0E A4 A8 36 79 3F 47 92 6D DA 2A 1B 64 2C 56
C2 37 25 A2 F6 A8 F4 75 A5 A2 82 ED FD 9C 89 8F
87 8A F5 04 81 C4 51 E0 2E 26 9D BC 02 DB 86 7E
29 80 F8 72 48 91 94 63 0F 6F ED 02 15 A2 40 48
CF 45 F4 95 E0 C2 0F BE 5C D0 57 C5 63 A7 8E 84
78 32 54 87 9A 81 BE 8C 22 2D D2 F5 99 94 A8 CB
D4 DC 46 95 4E 53 76 DD DD 95 9D FE 5B 72 04 D1
D7 45 33 1B 00 F0 7B 3C 6C 2C E4 97 E9 D1 9C A5
B2 91 4A 52 1F E1 BB EA 92 4C FF BE D9 8A 79 77
56 E7 CB 1D 09 32 15 7F 7D 49 A4 52 A0 89 46 52
6F 5C CB 58 84 00 82 ED 4E
What's wrong ?
I guess I must re-calcurate final_client_write_key.
But how ?
I'm so coufusing and perplexing now. f(?_?)?
Thanksyou.
______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
