The dtls implementation in OpenSSL-0.9.8a/0.9.8b seems to be non-conformant with RFC 4347 atleast in the following two cases:
1)Initial ClientHello and HelloVerifyRequest are included in the calculation of verify_data(HASH) for FINISHED message, whereas the standard specifies not to include.
2)The standard specifies the "VERSION" value in the header to be {254,255}, one's complement of DTLS 1.0 whereas the DTLS1_VERSION is defined to 0x0100.

I would like to confirm if my understanding is correct and know the version of draft used for implementation.

Thanks in Advance,
Kiran Chunduri

Reply via email to