Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 1635] SSL Decode not reliable, does not reliably detect "Finished" messages

[bugzilla-daemon@xxxxxxxxxxxxx]

http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1635


tomas.kukosa@xxxxxxxxxxx changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID




------- Comment #3 from tomas.kukosa@xxxxxxxxxxx  2007-06-05 14:20 GMT -------
The "failed" case is resuming of session. I.e. the handshake does not contain
all necessary information for decryption.
It should work only if you have session with full handshake and resumed session
in  one capture file.
You can see in ClientHello of "failed" case, that SessionID is non-zero. It
means client tries to resume previous session.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.