philippe_44 wrote: 
> So I went all the way to tcpdump/wireshark and there is some interesting
> findings: when it fails, the client (LMS sides) sends a TLS alert with a
> code 21, which means decryption failure AFAIK and then closes the
> connection (TCP FIN etc ...). So it's not the server doing anything, the
> problem is "detected" by the client, but it does not tell me if the
> decryption is the problem or the encryption is wrong, although b/c it's
> working on other platforms, I'd guess decryption is the issue. More to
> come

Continuing to search / compare on that topic: it seems that the
encryption failure alert happens from time to time on the download side
and the client does not care but, on the failing case, the client sends
such alert on the upload and then the server immediately closes the
connection. Looking a bit further to RFC5246,  such altert shall not be
sent as it might be used for an attack


Code:
--------------------
    
  decryption_failed_RESERVED
  This alert was used in some earlier versions of TLS, and may have
  permitted certain attacks against the CBC mode [CBCATT].  It MUST
  NOT be sent by compliant implementations.
  
--------------------


So I assume that where RP are hosted detects this as a risk and closes
the connection. Now need to find how to persude TLS stack to not send
this or ... to implement a HTTP resume with offset in LMS which seems
way more complicated.



LMS 7.7, 7.8 and 7.9 - 5xRadio, 3xBoom, 4xDuet, 1xTouch, 1 SB2. Sonos
PLAY:3, PLAY:5, Marantz NR1603, JBL OnBeat, XBoxOne, XBMC, Foobar2000,
ShairPortW, JRiver 21, 2xChromecast Audio, Chromecast v1 and v2, , Pi
B3, B2, Pi B+, 2xPi A+, Odroid-C1, Odroid-C2, Cubie2, Yamaha WX-010,
AppleTV 4, Airport Express, GGMM E5
------------------------------------------------------------------------
philippe_44's Profile: http://forums.slimdevices.com/member.php?userid=17261
View this thread: http://forums.slimdevices.com/showthread.php?t=108189

_______________________________________________
plugins mailing list
[email protected]
http://lists.slimdevices.com/mailman/listinfo/plugins

Reply via email to