Re: trying to understand handshake in s23_srvr.c

[Richard Levitte - VMS Whacker]

From: [EMAIL PROTECTED]

terr>  So I put some debugging code in and found out that the server
terr>  is recieving the following request:
terr>  
terr>  GET / HTTP/
terr>  
terr>  This is in the buffer (char *)p
terr>  
terr>  I am under the impression that this is correct.  

That is not correct.  A correct string would be:

GET / HTTP/1.0

You might want to read RFC2616 to know more about HTTP.

Anyhow, the message:

        error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request

means that a (non-encrypted) message has been sent where SSL was
expected.  In other words, someone has tried to access the following:

        http://whatever:443/

instead of

        https://whatever:443/

-- 
Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
Chairman@Stacken   \ S-168 35  BROMMA  \ T: +46-8-26 52 47
Redakteur@Stacken   \      SWEDEN       \ or +46-709-50 36 10
Procurator Odiosus Ex Infernis                -- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/
Software Engineer, Celo Communications: http://www.celocom.com/

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]