So we are working on making a product of one of our clients common criteria compliant. We are using tls-cc-tools for running FCS_TLSC tests but we are unable to run FCS_TLSS_EXT.1.1 test 5. Please tell how can we run those tests. where we have to make modifications in the packet.

closed as off-topic by Steffen Ullrich, Xiong Chiamiov, Serge Ballesta, Tobi Nary, Rory Alsop Feb 21 '18 at 21:46

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.


If you are using vanilla OpenSSL, you will pass Common Criteria TLS traffic modification tests. If you are using something else and is unsure, you will have to write your own client to send modified packets.

Generally, it will be up to a CC lab to run these tests to certify your product. They will have their own tools and methods.

Keep in mind, NIAP constantly issuing technical decisions, some are revisions and clarifications on how to conduct TLS testing.

Not the answer you're looking for? Browse other questions tagged or ask your own question.