Wireshark-bugs: [Wireshark-bugs] [Bug 8871] New: TLS decryption fails with XMPP start_tls

Date: Sun, 30 Jun 2013 05:54:36 +0000
Bug ID 8871
Summary TLS decryption fails with XMPP start_tls
Classification Unclassified
Product Wireshark
Version 1.10.0
Hardware All
OS All
Status UNCONFIRMED
Severity Normal
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Created attachment 11105 [details]
Proposed fix to this bug.

Build Information:

--
TLS decryption fails when trying to decrypt XMPP sessions using start_tls as
the port in the key list of the SSL preferences.

Looking at the code, the XMPP dissector has 2 issues:

1) The crude XML element detection for XMPP segmentation is run before checking
if the SSL dissector should be called.  As a result, the SSL dissector is not
called at the appropriate times.

2) The SSL dissector is called withoug resetting the desegment flags are not
manipulated as the SMTP dissector does so segmented SSL packets are not
properly reconstructed.  Generally this causes the server hello not to be
detected.

A proposed patch to fix these issues is attached.


You are receiving this mail because:
  • You are watching all bug changes.