On Wed, Oct 23, 2002 at 11:43:54AM -0400, Ashwin C Uthappa wrote:
> Hi all,
> Just some updates----
> 
> I used the openssl tool to try and establish communication with both the 
> engine (which fails) and the "proxy engine" (which succeeds). I've 
> pasted the output below.
> 
> Some details:  the engine is a java application on a remote 
> machine(Windows). The proxy engine is a C application that does a very 
> basic mimicry of what the engine is supposed to do and is running off a 
> Linux machine.
> 
> Still waiting..... I know the answer's out there!!
> 
> Thank you,
> - Ashwin
> 
> Output of openssl :
> -------------------------
> 
> WITH ENGINE :
> ----------------------
> OpenSSL> s_client -connect 10.10.10.114:8080 -debug -state -ssl3
> CONNECTED(00000003)
> SSL_connect:before/connect initialization
> write to 081490E0 [08152EA8] (90 bytes => 90 (0x5A))
> 0000 - 16 03 00 00 55 01 00 00-51 03 00 3d b6 c1 9e ba   ....U...Q..=....
> 0010 - 25 db 23 28 cd d3 7a 56-3f b7 59 29 a5 72 a4 42   %.#(..zV?.Y).r.B
> 0020 - 10 0a 9f 58 95 22 cb 62-00 58 00 00 00 2a 00 16   ...X.".b.X...*..
> 0030 - 00 13 00 0a 00 66 00 07-00 05 00 04 00 65 00 64   .....f.......e.d
> 0040 - 00 63 00 62 00 61 00 60-00 15 00 12 00 09 00 14   .c.b.a.`........
> 0050 - 00 11 00 08 00 06 00 03-01                        .........
> 005a - <SPACES/NULS>
> SSL_connect:SSLv3 write client hello A
> read from 081490E0 [0814E698] (5 bytes => 5 (0x5))
> 0000 - 48 54 54 50 2f                                    HTTP/

did you notice plaintext?   try this:
(echo GET / HTTP/1.0; echo; sleep 10) | telnet 10.10.10.114 8080

> write to 081490E0 [08158730] (7 bytes => 7 (0x7))
> 0000 - 15 54 54 00 02 02 28                              .TT...(
> SSL3 alert write:fatal:handshake failure
> SSL_connect:error in SSLv3 read server hello A
> 2545:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version 
> number:s3_pkt.c:279:
> 
> 
> WITH PROXY ENGINE :
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to