RFC 6347 : 4.2.8. Establishing New Associations with Existing Parameters

[shiva kumar]

Hi,

Does openSSL implement the section "4.2.8. Establishing New Associations
with Existing Parameters" in RFC 6347

I tried to test the feature with "openssl-1.1.1c" but couldn't simulate the
same.

Some details about my sample test:

Client:

1. Initiate a connection request for DTLS 1.2(target on a particular
IP/port)
2. Then close the DTLS connection(abruptly and not sending SSL shutdown
message)
3. Try to initiate a second connection request to same target on the same
initial IP/port

Server:

1. Accept the DTLS connection request (cookie exchange mechanism enabled)
2. Then call SSL_read to read the application data over DTLS
3. But it will get a connection request from client side(Basically client
hello)

Observation:

1. The client hangs in second handshake just retransmitting client hellos
2. The server just hangs in SSL_read(probably dropping the client hello
messages)

Thanks in advance for the help!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20190710/91e03535/attachment-0001.html>