Hi everyone,
I have a TLS server application which the old OpenSSL library has no
problem connecting to it but the latest couldn't.
The problem occurs in the first client hello stage while the server only
returned two bytes "02 28" for the s_client from OpenSSL-v0.9.8l
afterwards. But the same command works fine with the s_client from
OpenSSL-0.9.8a.
Since I do not have the source code of TLS server app, it is quite
difficult for me to debug this problem. The debug information is
appended as quotation. Is there anyway I can connect to it with latest
OpenSSL library? Any idea is welcomed.
Thank you very much.
Peter Lin
========================================================================================
*[r...@peter asm.sm]# openssl version*
OpenSSL 1.0.0-fips-beta4 10 Nov 2009
*[r...@peter asm.sm]# openssl s_client -connect 192.168.0.119:1173
-tls1 -debug*
CONNECTED(00000003)
write to 0x8217120 [0x82286db] (116 bytes => 116 (0x74))
0000 - 16 03 01 00 6f 01 00 00-6b 03 01 4b 82 3b 19 65 ....o...k..K.;.e
0010 - ca bf 32 30 64 b8 10 1a-a8 9c 66 5e e4 f4 b5 3b ..20d.....f^...;
0020 - 54 37 f7 3c d2 b0 9f 9d-1b bc 9d 00 00 38 00 39 T7.<.........8.9
0030 - 00 38 00 88 00 87 00 35-00 84 00 16 00 13 00 0a .8.....5........
0040 - 00 33 00 32 00 9a 00 99-00 45 00 44 00 2f 00 96 .3.2.....E.D./..
0050 - 00 41 00 05 00 04 00 15-00 12 00 09 00 14 00 11 .A..............
0060 - 00 08 00 06 00 03 02 01-00 00 09 ff 01 00 01 00 ................
0070 - 00 23 .#
0074 - <SPACES/NULS>
read from 0x8217120 [0x822418b] (5 bytes => 5 (0x5))
0000 - 15 03 01 00 02 .....
read from 0x8217120 [0x8224190] (2 bytes => 2 (0x2))
0000 - 02 28 .(
3078543068:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert
handshake failure:s3_pkt.c:1160:SSL alert number 40
3078543068:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake
failure:s3_pkt.c:590:
---
========================================================================================
*[r...@gdc214 asm]# openssl version*
OpenSSL 0.9.8a 11 Oct 2005
*[r...@gdc214 asm]# openssl s_client -connect 192.168.0.119:1173 -tls1
-debug*
CONNECTED(00000003)
write to 0x83e3850 [0x83edaf0] (100 bytes => 100 (0x64))
0000 - 16 03 01 00 5f 01 00 00-5b 03 01 4b 81 36 c8 ad ...._...[..K.6..
0010 - 65 99 52 a6 c6 f5 4b bc-35 7f 66 dc 42 63 a2 5c e.R...K.5.f.Bc.\
0020 - 49 d4 f3 b8 ca c7 e3 bc-72 0f 40 00 00 34 00 39 [email protected]
0030 - 00 38 00 35 00 16 00 13-00 0a 00 33 00 32 00 2f .8.5.......3.2./
0040 - 00 66 00 05 00 04 00 63-00 62 00 61 00 15 00 12 .f.....c.b.a....
0050 - 00 09 00 65 00 64 00 60-00 14 00 11 00 08 00 06 ...e.d.`........
0060 - 00 03 01 ...
0064 - <SPACES/NULS>
read from 0x83e3850 [0x83e92e0] (5 bytes => 5 (0x5))
0000 - 16 03 01 00 2a ....*
read from 0x83e3850 [0x83e92e5] (42 bytes => 42 (0x2A))
0000 - 02 00 00 26 03 01 4b 82-ac 49 0b 25 75 c3 68 18 ...&..K..I.%u.h.
0010 - 45 b0 7a 13 bf a8 96 c1-23 d2 0e b9 de 4c 93 d1 E.z.....#....L..
0020 - 3d 46 69 71 d6 8d 00 00-2f =Fiq..../
002a - <SPACES/NULS>
read from 0x83e3850 [0x83e92e0] (5 bytes => 5 (0x5))
0000 - 16 03 01 04 dd .....
========================================================================================
