[openssl-users] Troubleshooting SSL connections

Kyle Hamilton aerowolf at gmail.com
Fri Nov 3 00:43:38 UTC 2017


What kind of stateful packet inspection are the NATs doing?

Can you run packet captures on each network that's being translated?

-Kyle H

On Thu, Nov 2, 2017 at 4:23 PM, Paul Greene <paul.greene.va at gmail.com> wrote:
> Yes. I've made captures on both - the production client that I manage and
> the test client I have at home.
> On the production client, the conversation lasts only 8 packets - the
> initial 3 way handshake, my client sends a PUSH packet, gets an ACK from the
> upstream, and then the upstream sends a FIN packet and closes the
> connection. The actual error message you see from the commandline is what I
> posted above.
> On the test client, after the PUSH packet is sent to the upstream server, it
> starts a conversation, and they continue the conversation until I did a
> CTRL-C.
>
> Paul
>
> On Thu, Nov 2, 2017 at 11:00 AM, Salz, Rich via openssl-users
> <openssl-users at openssl.org> wrote:
>>
>> Have you thought of putting a packet-capture on, say, the client side and
>> then viewing it?
>>
>>
>> --
>> openssl-users mailing list
>> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
>
>
>
> --
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
>


More information about the openssl-users mailing list