First time here? Check out the FAQ!

Ask Your Question
0

Multiple Handshake Messages After the CCS [closed]

asked Mar 27 '3

AhamedFayaz gravatar image

updated Mar 27 '3

grahamb gravatar image

I am working on TLS 1.2 cipher suite TLS_DHE_RSA_WITH_AES_128_GCM_SHA256. 1. I got two hello Request after the CCS.

Secure Sockets Layer
    TLSv1.2 Record Layer: Change Cipher Spec Protocol: Change Cipher Spec
        Content Type: Change Cipher Spec (20)
        Version: TLS 1.2 (0x0303)
        Length: 1
        Change Cipher Spec Message
    TLSv1.2 Record Layer: Handshake Protocol: Multiple Handshake Messages
        Content Type: Handshake (22)
        Version: TLS 1.2 (0x0303)
        Length: 40
        Handshake Protocol: Hello Request
            Handshake Type: Hello Request (0)
            Length: 0
        Handshake Protocol: Hello Request
            Handshake Type: Hello Request (0)
            Length: 0

Please give me the guidance why instead of Finished message WS shows two hello request.

Thanks,

Preview: (hide)

Closed for the following reason duplicate question by AhamedFayaz
close date 2023-03-29 14:45:43.176309

Comments

Wireshark shows what has occurred but not why. Sometimes, via analysis or other means, the why can be inferred but with so little context to your question that's not really possible here.

grahamb gravatar imagegrahamb ( Mar 27 '3 )

gcm IV-ea0b61fc0000000000000001 Wire shark wrongly decrypt 0000 0000 as two hello request. As per protocol iv is correct.

AhamedFayaz gravatar imageAhamedFayaz ( Mar 27 '3 )

2 Answers

Sort by » oldest newest most voted
0

answered Mar 27 '3

grahamb gravatar image

updated Mar 27 '3

Please raise an issue for this on the Wireshark GitLab instance here and attach a capture showing the issue.

Preview: (hide)
link
0

answered Mar 29 '3

AhamedFayaz gravatar image

The issue was fixed. That because of my wire shark version is very old. I just update my wire shark now the issue was fixed.

Preview: (hide)
link

Comments

Why is the issue still open then?

Jaap gravatar imageJaap ( Mar 29 '3 )

Question Tools

1 follower

Stats

Asked: Mar 27 '3

Seen: 375 times

Last updated: Mar 29 '23