Dear All.

I have problem with SSL (or maybe with IE or FF - I lost now  )

when I try open https://server under IE I can't. Ethereal sayes:

("Handshake Failure" this is something that makes me sad)

Capturing on eth0
0.000000 192.168.49.1 -> 192.168.49.2 TCP 2675 > https [SYN] Seq=0 Ack=0
Win=16384 Len=0 MSS=1460
0.003649 192.168.49.2 -> 192.168.49.1 TCP https > 2675 [SYN, ACK] Seq=0
Ack=1 Win=5840 Len=0 MSS=1460
0.000269 192.168.49.1 -> 192.168.49.2 TCP 2675 > https [ACK] Seq=1 Ack=1
Win=17520 Len=0
0.001698 192.168.49.1 -> 192.168.49.2 SSLv2 Client Hello
0.001799 192.168.49.2 -> 192.168.49.1 TCP https > 2675 [ACK] Seq=1 Ack=7
9
Win=5840 Len=0
0.005199 192.168.49.2 -> 192.168.49.1 TLS Alert (Level: Fatal,
Description: Handshake Failure)
0.005445 192.168.49.2 -> 192.168.49.1 TCP https > 2675 [FIN, ACK] Seq=8
Ack=79 Win=5840 Len=0
0.005728 192.168.49.1 -> 192.168.49.2 TCP 2675 > https [ACK] Seq=79 Ack=
9
Win=17513 Len=0
0.005816 192.168.49.1 -> 192.168.49.2 TCP 2675 > https [FIN, ACK] Seq=79
Ack=9 Win=17513 Len=0
0.005843 192.168.49.2 -> 192.168.49.1 TCP https > 2675 [ACK] Seq=9 Ack=8
0
Win=5840 Len=0
0.006241 192.168.49.1 -> 192.168.49.2 TCP 2676 > https [SYN] Seq=0 Ack=0
Win=16384 Len=0 MSS=1460
0.006288 192.168.49.2 -> 192.168.49.1 TCP https > 2676 [SYN, ACK] Seq=0
Ack=1 Win=5840 Len=0 MSS=1460
0.006565 192.168.49.1 -> 192.168.49.2 TCP 2676 > https [ACK] Seq=1 Ack=1
Win=17520 Len=0
0.007106 192.168.49.1 -> 192.168.49.2 SSLv2 Client Hello
0.007182 192.168.49.2 -> 192.168.49.1 TCP https > 2676 [ACK] Seq=1 Ack=4
6
Win=5840 Len=0
0.011017 192.168.49.2 -> 192.168.49.1 SSLv2 Server Hello
0.012995 192.168.49.1 -> 192.168.49.2 TCP 2676 > https [FIN, ACK] Seq=46
Ack=1058 Win=16463 Len=0
0.013597 192.168.49.2 -> 192.168.49.1 TCP https > 2676 [FIN, ACK] Seq=10
58
Ack=47 Win=5840 Len=0
0.013923 192.168.49.1 -> 192.168.49.2 TCP 2676 > https [ACK] Seq=47
Ack=1059 Win=16463 Len=0

but under FF the same site:

Capturing on eth0
0.000000 192.168.49.1 -> 192.168.49.2 TCP 2687 > https [SYN] Seq=0 Ack=0
Win=16384 Len=0 MSS=1460
0.003648 192.168.49.2 -> 192.168.49.1 TCP https > 2687 [SYN, ACK] Seq=0
Ack=1 Win=5840 Len=0 MSS=1460
0.000253 192.168.49.1 -> 192.168.49.2 TCP 2687 > https [ACK] Seq=1 Ack=1
Win=17520 Len=0
0.001702 192.168.49.1 -> 192.168.49.2 TLS Client Hello
0.001798 192.168.49.2 -> 192.168.49.1 TCP https > 2687 [ACK] Seq=1 Ack=1
21
Win=5840 Len=0
0.005733 192.168.49.2 -> 192.168.49.1 TLS Server Hello, Change Cipher
Spec, Encrypted Handshake Message
0.007946 192.168.49.1 -> 192.168.49.2 TLS Change Cipher Spec, Encrypted
Handshake Message, Application Data
0.047868 192.168.49.2 -> 192.168.49.1 TCP https > 2687 [ACK] Seq=139
Ack=697 Win=6912 Len=0
0.081311 192.168.49.2 -> 192.168.49.1 TLS Application Data, Application
Data, [Unreassembled Packet (incorrect TCP checksum)]
0.081358 192.168.49.2 -> 192.168.49.1 TLS Continuation Data,
[Unreassembled Packet (incorrect TCP checksum)]
0.082444 192.168.49.1 -> 192.168.49.2 TCP 2687 > https [ACK] Seq=697
Ack=2901 Win=17520 Len=0

My IE is upgraded with encryption 128 bit strong.

Please help me.

Marek.

remove _blokada_ from my mail.

[ Post a follow-up to this message ]