Comment # 7
on bug 12793
from Peter Wu
(In reply to Andre Luyer from comment #6)
> Yes, no quick fix unfortunately...
> Can the HELLO_REQUEST be used as trigger for a new / blank SSL object in the
> first pass?
I think that the ClientHello is a better indication, HelloRequest can be
ignored AFAIK.
> I noticed in the debug log that the 'ssl state' is not reset (from 0x1F) to
> 0x00 at the start of the renegotiation (frame 17). Maybe that is the cause
> why the APPLICATION_DATA after the renegotiation is not properly decrypted.
That is indeed the problem, so I am looking at either resetting the flags and
some fields in ClientHello, or somehow create a complete new SSL session.
You are receiving this mail because:
- You are watching all bug changes.
