Re: client hello difference 1.0.1e vs 1.0.1f

2014-11-12 Thread Dr. Stephen Henson
On Wed, Nov 12, 2014, Tristan Hill wrote: > Hi, > > Is it possible to make s_client give more detail about the client > hello it sends. A break down covering the RFC structure would be > useful. > > struct { > ProtocolVersion client_version; > Random random; >

RE: client hello difference 1.0.1e vs 1.0.1f

2014-11-12 Thread Carl Young
Took me a while to see, but the difference is in the last line of the client hello. Your working example has MD5+RSA listed as a TLS 1.2 signature pair whereas first doesn't. 0302 SHA-224 DSA 0303 SHA-224 ECDSA 0201 SHA-1 RSA 0202 SHA-1 DSA 0203 SHA-1 ECDSA 000F TLS_DH_RSA_WITH_DES_CBC_SHA 0101