Re: OpenSSL 0.9.8b - DTLS1 bug

2006-08-11 Thread Kyle Hamilton
As I recall, it was someone who was working on it who was having patches committed as he implemented it, and never finished it? It probably is buggy. -Kyle H On 8/10/06, ViSolve Security Consulting Group [EMAIL PROTECTED] wrote: Hi Developers, We have compiled OpenSSL 0.9.8b on HP-UX

Re: OpenSSL 0.9.8b - DTLS1 bug

2006-08-11 Thread authesserre samuel
Hi, This implementation is totally wrong (I posted a complete list of problems I've found), this implementation doesn't follow the rfc at all but works on my Debian box to see where the problem comes from you could use Wireshark (new version of Ethereal) I have made a dissector that allow you to

OpenSSL 0.9.8b - DTLS1 bug

2006-08-10 Thread ViSolve Security Consulting Group
Hi Developers, We have compiled OpenSSL 0.9.8b on HP-UX Itanium Processor Family. While trying to establish a communication between a server and a client with DTLS1 protocol support. The server aborts with a core dump. SSL_accept:SSLv3 write key exchange Ad1_both.c(1063): OpenSSL internal