We are using a wildcard certificate requiring SNI and are also requiring
client certificate authentication.

Our TLS 1.2 client is seeing a ChangeCipherspec record with length 30 bytes
(x19) instead of the expected 0x01.  The broken ChangeCipherspec record
looks like this (hex) *14 03 03 00 01 19*.  Is this a problem with the TLS
1.2 client, or a problem with the OpenSSL 1.0.2d patch (for CVE-2015-1793)?

Thanks,
Paul Hebert/State University of New York
_______________________________________________
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Reply via email to