Did anyone ever figure out how to get around the bad mac decode thing??
My original post is below. Please help if you have any idea what is
going on.
-------- Original Message --------
Subject: Mozilla SSL error (-12272) bad mac decode
Date: Wed, 13 Feb 2002 17:09:18 +1000
I have an app that works fine with IE and Netscape 4 but fails
sometimes with Mozilla (0.9.6). I get the dreaded "bad mac decode"
error on the server and Mozilla throws a nice and cryptic popup
with "unknown SSL error (-12272)".
An interesting point to note is if I have two servers running
the app, the first one I go to will work, and the second will
get this error. If I restart the browser I can repeat this the
opposite way around.
I suspect this may be related to the discussions on renegotiation
on this list recently but I don't quite know how to apply that
in this situation. Did anyone end up figuring that out?
Here is the ssldump of the Mozilla attempted connection:
New TCP connection #1: buzz(35173) <-> fatwoody(443)
1 1 0.0014 (0.0014) C>S SSLv2 compatible client hello
Version 3.0
cipher suites
SSL2_CK_RC4
SSL2_CK_3DES
SSL2_CK_RC2
SSL2_CK_DES
SSL2_CK_RC4_EXPORT40
SSL2_CK_RC2_EXPORT40
SSL_DHE_DSS_WITH_RC4_128_SHA
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
SSL_RSA_WITH_RC4_128_MD5
Unknown value 0xfeff
SSL_RSA_WITH_3DES_EDE_CBC_SHA
Unknown value 0xfefe
SSL_DHE_RSA_WITH_DES_CBC_SHA
SSL_DHE_DSS_WITH_DES_CBC_SHA
SSL_RSA_WITH_DES_CBC_SHA
SSL_RSA_EXPORT1024_WITH_RC4_56_SHA
SSL_RSA_EXPORT1024_WITH_DES_CBC_SHA
SSL_RSA_EXPORT_WITH_RC4_40_MD5
SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5
1 2 0.0240 (0.0226) S>C Handshake
ServerHello
Version 3.0
session_id[32]=
bb 9e 08 0b 23 78 8c 48 57 31 39 e2 47 2b 83 97
06 df bf 99 bb d6 a2 0a 53 03 18 11 51 48 0e 5a
cipherSuite SSL_RSA_WITH_RC4_128_MD5
compressionMethod NULL
1 3 0.0240 (0.0000) S>C Handshake
Certificate
1 4 0.0240 (0.0000) S>C Handshake
ServerHelloDone
1 5 0.0315 (0.0075) C>S Handshake
ClientKeyExchange
1 6 0.0315 (0.0000) C>S ChangeCipherSpec
1 7 0.0315 (0.0000) C>S Handshake
1 8 0.0742 (0.0426) S>C Alert
level fatal
value bad_record_mac
1 0.0753 (0.0011) S>C TCP FIN
1 3.9798 (3.9045) C>S TCP FIN
--
Scanned by The Sheriff - http://www.telnetmedia.com/
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
