I am hoping for a better understanding about SSL/TLS by setting up two devices, running two different applications, allowing communications to go over SSL/TLS.
With OpenSSL I have created a certificate and key which I installed on both, the server and the client. On the client side, I can also choose from three cipher suites (on the server I don't have that option to choose from).
- TLS_RSA_WITH_NULL_SHA
- TLS_RSA_WITH_3DES_EDE_CBC_SHA
- TLS_RSA_WITH_AES_128_CBC_SHA
I use Wireshark to see what is going on during the communication that always fails, no matter what I select from above. I see a normal TCP communication: SYN, SYN ACK, ACK and then a FIN from the client. It is very obvious, I am doing something wrong, but honestly no clue what to do. It seems that it doesn't even get to the point of using the SSL protocol.
Can anyone please clarify things for me what Iam doing wrong and hand me a possible solution? This requires more professional security skills. Thanks in advance ! John
P.S.: I want to use self-signed certificates since it is only used for testing.