On Wed, May 12, 2004, Richard Holliday wrote:

> Thanks very much for your comments.
> 
> I agree that if the MS software was causing this issue it would manifest
> itself with a direct con. as well.
> 
> The version numbers I get when routing through a proxy are major =  0x0054
> and minor = 0x0054. These are being compared against the SSL* s version
> which is 0x0300.
> 
> These are consistent each time I use the proxy connection. Direct
> connections match to 0x0300.
> 
> I'll take a look at disabling the TLS this morning and also installing a
> newer proxy server.
> 

Well the cause isn't a broken SSL/TLS implementation: it is something else.

>From those values it looks like the version number is garbage and may be being
corrupted through the proxy or some other cause such as some added proxy
headers.

What does the connection look like when you issue the CONNECT command using
something like telnet? Do you get connected straight away or does some message
come back from the proxy? If you do get some message from the proxy you'll
need to swallow that before attempting the SSL connection.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to