[openssl-dev] Bug report: OpenSSL 1.0.1k DTLS handshake no longer works

Eugen-Andrei Gavriloaie shiretu at gmail.com
Wed Jan 14 20:08:17 UTC 2015


Hi all,

I believe I have found a bug which is only present in the latest versions (1.0.1k). I ran this test on a linux 64 ubuntu 14.10 and mac os x yosemite

I have created a simple C test which does the following things in this order:

1. initialize the SSL library
2. creates an X509 key and cert
3. creates an DTLS server SSL context
4. Setup 2 memory BIO instances on the SSL context
5. Feed the input BIO with a hardcoded "Client Hello" packet
6. Call SSL_accept

Wanted:
The output BIO should contain a packet ("Server Hello") to be sent over the wire

Observed:
The output BIO is empty, the handshake never succeeds

Same file test app linked with OpenSSL 1.0.1j works as expected, the output is generated.

I have attached the C file.

Best regards,
Andrei

-------------- next part --------------
A non-text attachment was scrubbed...
Name: dtls_bug.c
Type: application/octet-stream
Size: 6377 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20150114/b74d0b2d/attachment.obj>
-------------- next part --------------




More information about the openssl-dev mailing list