Comment # 2
on bug 9144
from Peter Wu
Created attachment 11565 [details]
repro-sslv3.tar.gz (premaster, pcapng, ssl debug_file)
A test capture for two SSLv3 cases where the dump could not be decrypted:
- TLS_RSA_WITH_IDEA_CBC_SHA (0x0007) - wrong mode, patch will follow.
- TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5 (0x0006) - libgcrypt does not support RC2,
although there was a discussion of this[1].
Command to generate dump-broken.pcapng:
dumpcap -f '(host ::1 or host 127.0.0.1) and tcp portrange 4433-4516' -i lo -w
dump-broken.pcapng
Command to generate debug.txt (using wireshark trunk with debugging patch):
wireshark -o ssl.keylog_file:$PWD/premaster.txt dump-broken.pcapng -o
http.ssl.port:4433-4516 -o ssl.debug_file:debug.txt
[1]: http://lists.gnupg.org/pipermail/gcrypt-devel/2003-June/000311.html
You are receiving this mail because:
- You are watching all bug changes.