[openssl-dev] [openssl.org #3657] OpenSSL 1.0.1k DTLS handshake no longer works

Eugen-Andrei Gavriloaie via RT rt at openssl.org
Wed Jan 14 20:21:47 UTC 2015


Hi all,

I believe I have found a bug which is only present in the latest versions (1.0.1k)

I have created a simple C test which does the following things in this order:

1. initialize the SSL library
2. creates an X509 key and cert
3. creates an DTLS server SSL context
4. Setup 2 memory BIO instances on the SSL context
5. Feed the input BIO with a hardcoded "Client Hello" packet
6. Call SSL_accept

Wanted:
The output BIO should contain a packet ("Server Hello") to be sent over the wire

Observed:
The output BIO is empty, the handshake never succeeds

Same file test app linked with OpenSSL 1.0.1j works as expected, the output is generated.

I have attached the C file.

Best regards,
Andrei


-------------- next part --------------
A non-text attachment was scrubbed...
Name: dtls_bug.c
Type: application/octet-stream
Size: 6377 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20150114/84a0f9f8/attachment.obj>
-------------- next part --------------





More information about the openssl-dev mailing list