On Mon, Aug 11, 2003 at 02:51:44PM +0000, Girish Hegde wrote:
> But by using those APIs i cannot do the testing for negtive flow, i started 
> writing a TCP/IP server(non SSL) and tried to send the messages( like 
> ServerHello, ServerHelloDone etc) mannually.
> I created the structures as defined in the SSL drafts in perl and  tried to 
> send them to the SSL Client.

If you're sending incomplete or wrong protocol messages,

> But it always says
> 1344:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown 
> protocol:.\ssl\s23_clnt.c:475:

of course you will get "unknown protocol" responses. That's a positive
outcome for your "negative flow" testing. ;-)

What are you attempting to do and what do you expect to see when you send
protocol messages not according to protocol?

-- 
Ng Pheng Siong <[EMAIL PROTECTED]> 

http://firewall.rulemaker.net  -+- Manage Your Firewall Rulebase Changes
http://www.post1.com/home/ngps -+- Open Source Python Crypto & SSL
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to