Ask Your Question
0

Multiple Handshake Messages After the CCS [closed]

asked 2023-03-27 12:19:24 +0000

AhamedFayaz gravatar image

updated 2023-03-27 13:18:37 +0000

grahamb gravatar image

I am working on TLS 1.2 cipher suite TLS_DHE_RSA_WITH_AES_128_GCM_SHA256. 1. I got two hello Request after the CCS.

Secure Sockets Layer
    TLSv1.2 Record Layer: Change Cipher Spec Protocol: Change Cipher Spec
        Content Type: Change Cipher Spec (20)
        Version: TLS 1.2 (0x0303)
        Length: 1
        Change Cipher Spec Message
    TLSv1.2 Record Layer: Handshake Protocol: Multiple Handshake Messages
        Content Type: Handshake (22)
        Version: TLS 1.2 (0x0303)
        Length: 40
        Handshake Protocol: Hello Request
            Handshake Type: Hello Request (0)
            Length: 0
        Handshake Protocol: Hello Request
            Handshake Type: Hello Request (0)
            Length: 0

Please give me the guidance why instead of Finished message WS shows two hello request.

Thanks,

edit retag flag offensive reopen merge delete

Closed for the following reason duplicate question by AhamedFayaz
close date 2023-03-29 14:45:43.176309

Comments

Wireshark shows what has occurred but not why. Sometimes, via analysis or other means, the why can be inferred but with so little context to your question that's not really possible here.

grahamb gravatar imagegrahamb ( 2023-03-27 13:21:21 +0000 )edit

gcm IV-ea0b61fc0000000000000001 Wire shark wrongly decrypt 0000 0000 as two hello request. As per protocol iv is correct.

AhamedFayaz gravatar imageAhamedFayaz ( 2023-03-27 13:42:06 +0000 )edit

2 Answers

Sort by ยป oldest newest most voted
0

answered 2023-03-27 14:03:35 +0000

grahamb gravatar image

updated 2023-03-27 14:13:57 +0000

Please raise an issue for this on the Wireshark GitLab instance here and attach a capture showing the issue.

edit flag offensive delete link more
0

answered 2023-03-29 10:57:42 +0000

AhamedFayaz gravatar image

The issue was fixed. That because of my wire shark version is very old. I just update my wire shark now the issue was fixed.

edit flag offensive delete link more

Comments

Why is the issue still open then?

Jaap gravatar imageJaap ( 2023-03-29 14:27:00 +0000 )edit

Question Tools

1 follower

Stats

Asked: 2023-03-27 12:19:24 +0000

Seen: 345 times

Last updated: Mar 29 '23