Hi,
This is my first mail to this Group. Consider me a novice in Openssl
since I am just getting used to the API's and understanding the behavior.
I am facing one problem. We have an MFP/Printer which acts as a client
and is trying to connect to a server through a Secure device. When the
client is connected to a Win XP machine(server), then it works fine. But the
same client when connected to a Windows 2k8 Server, is not able to complete
the SSL handshake.
The flow is as follows in case of Windows XP :
Client sends Hello.(SSLv2)
Server responds with Hello, Certificate and Server Hello Done.(TLSv1)
Client sends Client Key Exchange, Change Cipher Spec and Encrypted Handshake
Message.(TLSv1)
Server sends Change Cipher Spec and Encrypted Handshake Message.(TLSv1)
Client sends Application Data.(TLSv1)
Server sends Application Data.(TLSv1)
Client sends Encrypted Alert.(TLSv1)
Server sends Encrypted Alert.(TLSv1)
Client sends ACK.
Server sends FIN, ACK.
Cllient sends ACK
Again it starts :
Client sends Hello.(SSLv2)
Server responds with Hello, Certificate and Server Hello Done.(TLSv1)
Client sends Client Key Exchange, Change Cipher Spec and Encrypted Handshake
Message.(TLSv1)
Server sends Change Cipher Spec and Encrypted Handshake Message.(TLSv1)
Client sends Application Data.(TLSv1)
Server sends Application Data.(TLSv1)
And it works fine.
The flow is as follows in case of Windows 2k8 :
Client sends Hello.(SSLv2)
Server responds with Hello, Certificate and Server Hello Done.(TLSv1)
Client sends Client Key Exchange, Change Cipher Spec and Encrypted Handshake
Message.(TLSv1)
Server sends Change Cipher Spec and Encrypted Handshake Message.(TLSv1)
Client sends Application Data, Application Data.(TLSv1) [Different
from Win XP flow]
Server sends Encrypted Alert.(TLSv1)
Client sends Encrypted Alert.(TLSv1)
Client sends FIN,ACK.
Server sends ACK
Client sends RST,ACK and the connection closes.
I am not able to figure out why(in case of Win 2k8) the Client is sending
Application Data twice and the server is not sending back any data but only
encryption alert.
And why is the connection not starting again.
Please help me in tackling this issue. Thanks in advance.
--
With regards,
Nilotpal
