Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

regression in EXP-RC4-MD5 in SSLv2 #732

Open
tomato42 opened this issue Dec 17, 2020 · 0 comments
Open

regression in EXP-RC4-MD5 in SSLv2 #732

tomato42 opened this issue Dec 17, 2020 · 0 comments
Labels
bug unintented behaviour in tlsfuzzer code

Comments

@tomato42
Copy link
Member

Bug Report

System Information

Type Version/Name
Operating System Name RHEL
Operating System Version 6.10
Python version 2.6.6
tlslite-ng version v0.8.0-alpha38/9951ec1c7696
tlsfuzzer revision d7d8724

Problem description

EXP-RC4-MD5 cipher fails with TLSBadRecordMAC in the test-sslv2-connection.py when executed against openssl

Describe how to reproduce the problem

Start openssl-1.0.1e-59.el6_10 with sslv2 enabled, run the script

Expected behaviour

all ciphers working

Include errors or backtraces

Connect with SSLv2 EXP-RC4-MD5 ...
Error encountered while processing node <tlsfuzzer.expect.ExpectVerify object at 0x1e4ad90> (child: <tlsfuzzer.expect.ExpectFinished object at 0x1e4add0>) with last message being: None
Error while processing
Traceback (most recent call last):
  File "../test-sslv2-connection.py", line 131, in main
    runner.run()
  File "/tmp/tmp.RXUdUTLshO/tlsfuzzer/tlsfuzzer/runner.py", line 196, in run
    header, parser = self.state.msg_sock.\
  File "/tmp/tmp.RXUdUTLshO/tlsfuzzer/tlslite/messagesocket.py", line 102, in recvMessageBlocking
    for res in self.recvMessage():
  File "/tmp/tmp.RXUdUTLshO/tlsfuzzer/tlslite/messagesocket.py", line 84, in recvMessage
    for ret in self.recvRecord():
  File "/tmp/tmp.RXUdUTLshO/tlsfuzzer/tlslite/recordlayer.py", line 910, in recvRecord
    data = self._decryptSSL2(data, header.padding)
  File "/tmp/tmp.RXUdUTLshO/tlsfuzzer/tlslite/recordlayer.py", line 846, in _decryptSSL2
    raise TLSBadRecordMAC()
TLSBadRecordMAC

Additional context

@tomato42 tomato42 added the bug unintented behaviour in tlsfuzzer code label Dec 17, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug unintented behaviour in tlsfuzzer code
Projects
None yet
Development

No branches or pull requests

1 participant