Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-bugs: [Wireshark-bugs] [Bug 1635] SSL Decode not reliable, does not reliably detect "Finished" messages

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 5 Jun 2007 14:20:39 +0000 (GMT)

http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1635


tomas.kukosa@xxxxxxxxxxx changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID




------- Comment #3 from tomas.kukosa@xxxxxxxxxxx  2007-06-05 14:20 GMT -------
The "failed" case is resuming of session. I.e. the handshake does not contain
all necessary information for decryption.
It should work only if you have session with full handshake and resumed session
in  one capture file.
You can see in ClientHello of "failed" case, that SessionID is non-zero. It
means client tries to resume previous session.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

  • Prev by Date: [Wireshark-bugs] [Bug 1642] Dissector bug, protocol SMPP
  • Next by Date: [Wireshark-bugs] [Bug 1642] Dissector bug, protocol SMPP
  • Previous by thread: [Wireshark-bugs] [Bug 1635] SSL Decode not reliable, does not reliably detect "Finished" messages
  • Next by thread: [Wireshark-bugs] [Bug 1605] No source and destination IP address resolution
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation