Re: s_server/s_client on checking middlebox compatibility

2019-02-27 Thread Hubert Kario
On Wednesday, 27 February 2019 03:24:38 CET John Jiang wrote: > I had tried TLS Fuzzer, and it worked for me. > I just wished that OpenSSL can do the similar things. The problem is that the middlebox compatibility mode is not defined strictly by the standard, and while all the popular TLS librari

Re: s_server/s_client on checking middlebox compatibility

2019-02-26 Thread John Jiang
I had tried TLS Fuzzer, and it worked for me. I just wished that OpenSSL can do the similar things. Thanks! On Tue, Feb 26, 2019 at 9:56 PM Hubert Kario wrote: > On Tuesday, 26 February 2019 07:22:52 CET John Jiang wrote: > > Is it possible to check if peer implements middlebox compatibility by

Re: s_server/s_client on checking middlebox compatibility

2019-02-26 Thread Hubert Kario
On Tuesday, 26 February 2019 07:22:52 CET John Jiang wrote: > Is it possible to check if peer implements middlebox compatibility by > s_server/s_client? > It looks the test tools don't care this point. > For example, if a server doesn't send change_cipher_spec after > HelloRetryRequest, s_client st

Re: s_server/s_client on checking middlebox compatibility

2019-02-26 Thread Matt Caswell
On 26/02/2019 06:22, John Jiang wrote: > Is it possible to check if peer implements middlebox compatibility by > s_server/s_client? > It looks the test tools don't care this point. > For example, if a server doesn't send change_cipher_spec after > HelloRetryRequest, s_client still feels fine.Tha

s_server/s_client on checking middlebox compatibility

2019-02-25 Thread John Jiang
Is it possible to check if peer implements middlebox compatibility by s_server/s_client? It looks the test tools don't care this point. For example, if a server doesn't send change_cipher_spec after HelloRetryRequest, s_client still feels fine.That's not bad. But can I setup these tools to check mi