Re: Fwd: TLS/SSH bugs

Frederik Kriewitz <[email protected]> writes:

>There seems to be a problem with TLS ClientHello extension handling (breaking
>compatibility with Chrome and Firefox without SSLv3 support):
>http://forums.apc.com/message/65421#65421

The problem with the versions is that Firefox (and presumably Chrome) send
different version numbers in two different locations in their hello message.
cryptlib handles this conservatively and uses the lowest common denominator of
the two, which means that you always end up with a final version that's lower
than the theoretically possible version.  I've changed the code to use the
higher of the two different versions given in the hello message rather than
the lower, I guess I'll heard from people if this breaks things...

Peter.

_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.