> It seems that I've found two small bugs in OpenSSL (at least 0.9.6c
> and the latest snapshot).
>
> In ssl/s3_srvr.c function ssl3_get_client_hello, after the
> last field (compression) has been parsed, there's a test:
>
> /* TLS does not mind if there is extra stuff */
> if (s->version ==
Hi,
It seems that I've found two small bugs in OpenSSL (at least 0.9.6c
and the latest snapshot).
In ssl/s3_srvr.c function ssl3_get_client_hello, after the
last field (compression) has been parsed, there's a test:
/* TLS does not mind if there is extra stuff */
if (s->version == SSL3_VERS
On Fri, Apr 12, 2002 at 11:38:34PM -0600, Dax Kelson wrote:
> On Fri, 2002-04-12 at 22:30, Geoff Thorpe wrote:
> >
> > Can you get any log messages from the server as to "errors" it is reporting
> > at the time these connections are being dumped that are *not* reported when
> > the connections a