On Mon, Aug 11, 2003 at 02:51:44PM +0000, Girish Hegde wrote: > But by using those APIs i cannot do the testing for negtive flow, i started > writing a TCP/IP server(non SSL) and tried to send the messages( like > ServerHello, ServerHelloDone etc) mannually. > I created the structures as defined in the SSL drafts in perl and tried to > send them to the SSL Client.
If you're sending incomplete or wrong protocol messages, > But it always says > 1344:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown > protocol:.\ssl\s23_clnt.c:475: of course you will get "unknown protocol" responses. That's a positive outcome for your "negative flow" testing. ;-) What are you attempting to do and what do you expect to see when you send protocol messages not according to protocol? -- Ng Pheng Siong <[EMAIL PROTECTED]> http://firewall.rulemaker.net -+- Manage Your Firewall Rulebase Changes http://www.post1.com/home/ngps -+- Open Source Python Crypto & SSL ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]