I tried to reuse the session using session ID...
$openssl s_client -connect www.google.com:443 -reconnect -no_ticket
But, why i got Hello Request TLS message?
Is this mean that, My session key was updated while session reuse ?
-
1It's not really HelloRequest; it's Wireshark trying to decode the encrypted Finished message and misunderstanding the nonce as data. Dupe security.stackexchange.com/questions/57804/… and superuser.com/questions/752605/crazy-finished-message-in-tls .– dave_thompson_085Jan 6, 2017 at 8:49
Add a comment
|
1 Answer
Wireshark Bug.
I think this is bad output in WireShark.
Because anything after "Change Cipher Spec" is encrypted.
I think it is a bug in Wireshark that still tries to parse the encrypted bytes as unencrypted and then outputs garbage.
Add the private key to WireShark and try again.
See:
answered Jan 6, 2017 at 8:41
-
Okay! Thanks @StackzOfZtuff. I thought TLS Renegotiation took place and my session key was updated. Hello Request TLS Handshake message use for Renegotiation normally and. Mostly server will send this message to the client when he want to Re-establish the session Jan 6, 2017 at 9:09