Question about DTLS implementation
Seung-bum Jin <[email protected]> Fri, 8 Nov 2019 17:26:48 +0900
| Newsgroups | gmane.comp.encryption.bouncy-castle.devel |
|---|---|
| Message-ID | <CANzR=_XCjxxvW2EGdCC8xTTvbtrDSg-KfFDyY5HMNBOUDTpRbw@mail.gmail.com> |
--000000000000ace7570596d18b3f Content-Type: text/plain; charset="UTF-8" Hi All, We are trying to use the BouncyCastle 1.63 java source to implement DTLS protcol on our JSSE provider. While review the source code, we found code stuffs handling HandshakeType.new_session_ticket, but it's not mentioned in RFC-6347 4.3.2. (Handshake Protocol), 4.2.4. (Figure 2). We have question about that is the implementation correct? And the DTLSServerProtocol does not sends hello_verify_request. In the point of design approach, it seemed to be right way to handle the request in clinet and server protocol class, not in DTLSVerifier class, regrdless of synchronous or aynchronous processing. And the code in the DTLSClient.java may works when no hello_verify_request received. We have also question about is that right. Regards, Seung-Bum Jin. Driector, Research & Development Dept. Peoplecar, Replublic Of Korea. --000000000000ace7570596d18b3f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><p style=3D"margin:0px;padding:0px;border:0px;outline:0px;= font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:i= nherit;font-size:12pt;line-height:24px;font-family:=EA=B5=B4=EB=A6=BC;verti= cal-align:baseline;min-height:20px">Hi All,</p><p style=3D"margin:0px;paddi= ng:0px;border:0px;outline:0px;font-variant-numeric:inherit;font-variant-eas= t-asian:inherit;font-stretch:inherit;font-size:12pt;line-height:24px;font-f= amily:=EA=B5=B4=EB=A6=BC;vertical-align:baseline;min-height:20px">We are tr= ying to use the BouncyCastle 1.63 java source to implement DTLS protcol on = our JSSE provider.</p><p style=3D"margin:0px;padding:0px;border:0px;outline= :0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stre= tch:inherit;font-size:12pt;line-height:24px;font-family:=EA=B5=B4=EB=A6=BC;= vertical-align:baseline;min-height:20px">While review the source code, we f= ound code stuffs handling=C2=A0<span style=3D"margin:0px;padding:0px;border= :0px;outline:0px;font-style:inherit;font-variant:inherit;font-weight:inheri= t;font-stretch:inherit;font-size:12pt;line-height:24px;vertical-align:basel= ine">HandshakeType.new_session_ticket, but it's not mentioned in RFC-63= 47 4.3.2. (Handshake Protocol), 4.2.4. (Figure 2).</span></p><p style=3D"ma= rgin:0px;padding:0px;border:0px;outline:0px;font-variant-numeric:inherit;fo= nt-variant-east-asian:inherit;font-stretch:inherit;font-size:12pt;line-heig= ht:24px;font-family:=EA=B5=B4=EB=A6=BC;vertical-align:baseline;min-height:2= 0px"><span style=3D"margin:0px;padding:0px;border:0px;outline:0px;font-styl= e:inherit;font-variant:inherit;font-weight:inherit;font-stretch:inherit;fon= t-size:12pt;line-height:24px;vertical-align:baseline">We have question abou= t that is the implementation correct?=C2=A0</span></p><p style=3D"margin:0p= x;padding:0px;border:0px;outline:0px;font-variant-numeric:inherit;font-vari= ant-east-asian:inherit;font-stretch:inherit;font-size:12pt;line-height:24px= ;font-family:=EA=B5=B4=EB=A6=BC;vertical-align:baseline;min-height:20px"><s= pan style=3D"margin:0px;padding:0px;border:0px;outline:0px;font-style:inher= it;font-variant:inherit;font-weight:inherit;font-stretch:inherit;font-size:= 12pt;line-height:24px;vertical-align:baseline">And the DTLSServerProtocol d= oes not sends=C2=A0</span><span style=3D"margin:0px;padding:0px;border:0px;= outline:0px;font-style:inherit;font-variant:inherit;font-weight:inherit;fon= t-stretch:inherit;font-size:12pt;line-height:24px;vertical-align:baseline">= hello_verify_request. In the point of design approach, it seemed to be righ= t way to handle the request in clinet and server protocol class, not in DTL= SVerifier class, regrdless of synchronous or aynchronous processing.</span>= </p><p style=3D"margin:0px;padding:0px;border:0px;outline:0px;font-variant-= numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-s= ize:12pt;line-height:24px;font-family:=EA=B5=B4=EB=A6=BC;vertical-align:bas= eline;min-height:20px"><span style=3D"margin:0px;padding:0px;border:0px;out= line:0px;font-style:inherit;font-variant:inherit;font-weight:inherit;font-s= tretch:inherit;font-size:12pt;line-height:24px;vertical-align:baseline">And= the code in the DTLSClient.java may works when no=C2=A0</span><span style= =3D"margin:0px;padding:0px;border:0px;outline:0px;font-style:inherit;font-v= ariant:inherit;font-weight:inherit;font-stretch:inherit;font-size:12pt;line= -height:24px;vertical-align:baseline">hello_verify_request received. We hav= e also question about is that right.</span></p><p style=3D"margin:0px;paddi= ng:0px;border:0px;outline:0px;font-variant-numeric:inherit;font-variant-eas= t-asian:inherit;font-stretch:inherit;font-size:12pt;line-height:24px;font-f= amily:=EA=B5=B4=EB=A6=BC;vertical-align:baseline;min-height:20px"><span sty= le=3D"margin:0px;padding:0px;border:0px;outline:0px;font-style:inherit;font= -variant:inherit;font-weight:inherit;font-stretch:inherit;font-size:12pt;li= ne-height:24px;vertical-align:baseline">Regards,</span></p><p style=3D"marg= in:0px;padding:0px;border:0px;outline:0px;font-variant-numeric:inherit;font= -variant-east-asian:inherit;font-stretch:inherit;font-size:12pt;line-height= :24px;font-family:=EA=B5=B4=EB=A6=BC;vertical-align:baseline;min-height:20p= x"><span style=3D"margin:0px;padding:0px;border:0px;outline:0px;font-style:= inherit;font-variant:inherit;font-weight:inherit;font-stretch:inherit;font-= size:12pt;line-height:24px;vertical-align:baseline"><br></span></p><p style= =3D"margin:0px;padding:0px;border:0px;outline:0px;font-variant-numeric:inhe= rit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:10pt;lin= e-height:20px;font-family:=EB=8F=8B=EC=9B=80;vertical-align:baseline;min-he= ight:20px">Seung-Bum Jin.</p><p style=3D"margin:0px;padding:0px;border:0px;= outline:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;fo= nt-stretch:inherit;font-size:12pt;line-height:24px;font-family:=EA=B5=B4=EB= =A6=BC;vertical-align:baseline;min-height:20px">=C2=A0</p><p style=3D"margi= n:0px;padding:0px;border:0px;outline:0px;font-variant-numeric:inherit;font-= variant-east-asian:inherit;font-stretch:inherit;font-size:10pt;line-height:= 20px;font-family:=EB=8F=8B=EC=9B=80;vertical-align:baseline;min-height:20px= ">Driector, Research & Development Dept.</p><p style=3D"margin:0px;padd= ing:0px;border:0px;outline:0px;font-variant-numeric:inherit;font-variant-ea= st-asian:inherit;font-stretch:inherit;font-size:10pt;line-height:20px;font-= family:=EB=8F=8B=EC=9B=80;vertical-align:baseline;min-height:20px">Peopleca= r,</p><p style=3D"margin:0px;padding:0px;border:0px;outline:0px;font-varian= t-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font= -size:10pt;line-height:20px;font-family:=EB=8F=8B=EC=9B=80;vertical-align:b= aseline;min-height:20px">Replublic Of Korea.</p><br class=3D"gmail-Apple-in= terchange-newline"></div> --000000000000ace7570596d18b3f--