Re: [TLS] Re: draft-ietf-tls-rfc4346-bis-01.txt

Bodo Moeller <bmoeller@acm.org> wrote on 07/04/2006 05:41:06 AM:

> On Mon, Jul 03, 2006 at 07:14:15PM +0300, Pasi.Eronen@nokia.com wrote:
> 
> > A quick and totally unscientific survey of what some widely used
> > SSL/TLS implementations do:
> > 
> > - OpenSSL (0.9.8)
> >   - When configured in "both SSLv3 and TLSv10 allowed" mode,
> >     sends V2 ClientHello.
> 
> This is the behavior of OpenSSL versions up to 0.9.7g.  Versions
> 0.9.7h and later, including 0.9.8, will actually send a TLS/SSL3
> format Client Hello message with version number {03,01} in both
> fields. 

The 0.9.8 behavior doesn't make sense to me. I think the correct behaviour 
would be to encode the minimum protocol {03,00} in the record's protocol 
field and the highest protocol {03,01} in the client_hello message's 
protocol field. A server that understands only SSLv3 could reject a client 
hello message that uses a record protocol of TLSv1. To negotiate with an 
SSLv2 server the client must send an SSLv2 client hello so why would the 
situation be any different for SSLv3/TLSv1? 

-----------------------------------------------
Robert Dugal
Member of Development Group
Certicom Corp.
EMAIL: rdugal@certicom.com
PHONE: (905) 501-3848
FAX  : (905) 507-4230
WEBSITE: www.certicom.com