[openssl-users] How to respond to TLS heartbeat in openssl

Keshava Krishna Bhat K keshavkrishna88 at gmail.com
Fri Dec 22 06:32:48 UTC 2017

Ok, I got to know that
 openssl version -a gives out the flags used while building openssl.
so the output of this was

OpenSSL 1.0.2g  1 Mar 2016
built on: reproducible build, date unspecified
platform: debian-amd64
options:  bn(64,64) rc4(16x,int) des(idx,cisc,16,int) blowfish(idx)
compiler: cc -I. -I.. -I../include  -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS
-fstack-protector-strong -Wformat -Werror=format-security -Wdate-time
-D_FORTIFY_SOURCE=2 -Wl,-Bsymbolic-functions -Wl,-z,relro -Wa,--noexecstack
OPENSSLDIR: "/usr/lib/ssl"

Since the putput above does not have OPENSSL_NO_HEARTBEATS, I assume
heartbeats are not disabled in the build.
So I am back to square one :( -> how do I make the server respond to a TLS
heartbeat request ? Do I have to read the packet and write it back ?

But code in the following file and method suggests this would done
automatically (but again I have a layman's knowledge on C, I could be wrong)
t1_lib.c tls1_process_heartbeat


On Thu, Dec 21, 2017 at 11:49 AM, Keshava Krishna Bhat K <
keshavkrishna88 at gmail.com> wrote:

> Hi,
> Is this controlled by the Makefile?
> Regards,
> Keshava.
> On Wed, Dec 20, 2017 at 6:20 PM, Keshava Krishna Bhat K <
> keshavkrishna88 at gmail.com> wrote:
>> Hi All,
>> I am writing a TLS server that responds to a incoming TLS heartbeat
>> request. I am using OpenSSL 1.0.2g .
>> But I am not able to get the server respond to a hearbeat request.
>> Any clue on what I am missing?
>> The code snippets are here https://stackoverflow.com
>> /questions/47902283/how-to-respond-to-tls-heartbeat-in-openssl .
>> I also got a clue that the version of openssl I am using might have
>> hearbeats disabled. But how do I check if heartbeats are enabled in OpenSSL
>> 1.0.2g?
>> Regards,
>> Keshava.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20171222/8da07bee/attachment.html>

More information about the openssl-users mailing list