So we are working on making a product of one of our clients common criteria compliant. We are using tls-cc-tools for running FCS_TLSC tests but we are unable to run FCS_TLSS_EXT.1.1 test 5. Please tell how can we run those tests. where we have to make modifications in the packet.
closed as off-topic by Steffen Ullrich, Xiong Chiamiov, Serge Ballesta, Tobi Nary, Rory Alsop♦ Feb 21 '18 at 21:46
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "Questions seeking product recommendations are off-topic as they become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve." – Steffen Ullrich, Xiong Chiamiov, Serge Ballesta, Tobi Nary, Rory Alsop
If you are using vanilla OpenSSL, you will pass Common Criteria TLS traffic modification tests. If you are using something else and is unsure, you will have to write your own client to send modified packets.
Generally, it will be up to a CC lab to run these tests to certify your product. They will have their own tools and methods.
Keep in mind, NIAP constantly issuing technical decisions, some are revisions and clarifications on how to conduct TLS testing.