Unfortunately, we don't see any response from the server to the clientHello but we could see the TCP connection reset.Īre the server and client on the same machine or is there a network between them? If there is a network is there any firewall or other middlebox in between? Even if don't exclude tls1_3, in that case, the client should be flexible enough to mutually agree on the supported version(assuming the server doesn't support tls1_3). Have tried with older openssl versions like 1.0.2, and 1.1.1. Which other versions have you tried it with? This issue is observed with openssl-3.0.3 specifically.
The server is Microsoft LDAP AD running on a secure 636 port. The Server and client both are not using the same version. So, to be clear, both server and client are using OpenSSL 3.0.3? Would really appreciate if you can throw some light on Please find my response inline. New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384 SSL handshake has read 2407 bytes and written 358 bytes Server Temp Key: ECDH, secp384r1, 384 bits Shared Requested Signature Algorithms: RSA+SHA256:RSA+SHA384:ECDSA+SHA256:ECDSA+SHA384:RSA+SHA512:ECDSA+SHA512 Requested Signature Algorithms: RSA+SHA256:RSA+SHA384:ECDSA+SHA256:ECDSA+SHA384:RSA+SHA512:ECDSA+SHA512 Issuer=DC = com, DC = cs, DC = ADserver, CN = ADserver-CSPQ202WINSQL-CAĬlient Certificate Types: RSA sign, DSA sign, ECDSA sign Qig5eOVauaDbxR2LCzq5a682vnvOLKlFC6UqtzAqPingXUI9SQnp RHHzoeeKxo1yoGWgUL+zooTryYg1yyhC7Qm9Lw7VYbCAFGDz/B8u+0kPQcfcY0Mn Q+PsS26b/Ikne7NipdZogkNqoZBbqtmVCYcuMciTTl4g8min1GQ6oCPQEk6VvB8Y fVlINBIpMD9znM7QDgMoNr6pPGM6SyuIcs9mlLGDQu3scFooYIpTg5dNWXe1LADītNqoKIGmjZZCZgcmCEVR9kDEemNKVmhmXwXmkiMt4YUKB7da1TvyJtSJazf2hQv Oamo7Sd94UhwmznlN5MHxdpvQkZSI4TfOml227Df+PoBiOKQZZAzdPkvIL8QzTfp U+hZFGH14t/+f6NZY1VoeJP8nYSP+3uICZStIgdKuz40RSmLbRajfu2XbISyYHjr SzT8ac0X8OH9t1pT47j48jd7yr圜DSJlXvOEzCiO6QqoUd8TZxWkxC6rQoIFbNBp P29iamVjdENsYXNzPWNlcnRpZmljYXRpb25BdXRob3JpdHkwDQYJKoZIhvcNAQELīQADggIBAFqf3pWsMRdm2u4mArk5CqRGsCzs0yhYb5s68wTmbR8LsxR2YBtWWPUuĬWPKn6OJKQte+bmzEkg4/J+nuzLRIooA8zJvapdXpfA3F8xLwnFnKBADKXpI3TpPĬJwM40S61uSHHtEmY3hegSA4uLzpMRReTVpKwD22WkRq29X3zWgnpKyuH82gLjIQ UHVibGljJTIwS2V5JTIwU2VydmljZXMsQ049U2VydmljZXMsQ049Q29uZmlndXJhĭGlvbi圎Qz1BRHNlcnZlci圎Qz1jcy圎Qz1jb20/Y0FDZXJ0aWZpY2F0ZT9iYXNl SmxkYXA6Ly8vQ049QURzZXJ2ZXItQ1NQUTIwMldJTlNRTC1DQSxDTj1BSUEsQ049 ZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzĭHJpYnV0aW9uUG9pbnQwgdIGCCsGAQUFBwEBBIHFMIHCMIG/BggrBgEFBQcwAoaB V0lOU1FMLENOPUNEUCxDTj1QdWJsaWMlMjBLZXklMjBTZXJ2aWNlcyxDTj1TZXJ2ĪWNlcyxDTj1Db25maWd1cmF0aW9uLERDPUFEc2VydmVyLERDPWNzLERDPWNvbT9j ZWxkYXA6Ly8vQ049QURzZXJ2ZXItQ1NQUTIwMldJTlNRTC1DQSxDTj1DU1BRMjAy
LmNzLmNvbTAdBgNVHQ4EFgQUlSelO7I1GxAgbZWdrNcq4GPq8t8wHwYDVR0jBBgwįoAUpYhQesmOm5pucV95g7JggEhab9wwgeQGA1UdHwSB3DCB2TCB1qCB06CB0IaB GjcZAaASBBD2OtdvVXqlRpNynZaRdj/mgh1DU1BRMjAyV0lOU1FMLkFEc2VydmVy SAFlAwQBBTAHBgUrDgMCBzAKBggqhkiG9w0DBzBJBgNVHREEQjBAoB8GCSsGAQQB ZQByMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAOBgNVHQ8BAf8EBAMCīaAweAYJKoZIhvcNAQkPBGswaTAOBggqhkiG9w0DAgICAIAwDgYIKoZIhvcNAwQCĪgCAMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAS0wCwYJYIZIAWUDBAECMAsGCWCG NSXIxBUjNHi/7dqAbcgd45yv+o4MD0q+8WrFOC2znsJB9XoIyQIDAQABo4IDJTCCĪyEwLwYJKwYBBAGCNxQCBCIeIABEAG8AbQBhAGkAbgBDAG8AbgB0AHIAbwBsAGwA +2xlsKyNQwf+Kau6jG8nW9vD9l0BwOdi603FDraWVt2ZCALFi/S8Jk9cZqC9sfua Q8PU7MccEuhrrA68+G4umO+BDly/VNT8hg8HtJa2WB4P1uVDdO7Uk1fKNxHdMpA9 QiF9kCDjiqxR4SQ+Sk2/VKY8ZX7vGvFC2DHGKsITG5LpqyatiacAqip0Wsc+60Ev HbJ7gIoeQZnRLq0GAUOcbYoJ1tFnaJ99TH2fZNqGotVoMkZAJCJz7AcfUGRtA07F MldJTlNRTC1DQTAeFw0yMjAyMDIxNDAxNTNaFw0yMzAyMDIxNDAxNTNaMCgxJjAkīgNVBAMTHUNTUFEyMDJXSU5TUUwuQURzZXJ2ZXIuY3MuY29tMIIBIjANBgkqhkiGĩw0BAQEFAAOCAQ8AMIIBCgKCAQEAylGvk8x4ddaJOejA8wVLOwwIRFW0KHJPjK85 MIIHQzCCBSugAwIBAgITUwAAAAPPrZAfs1y4nAAAAAAAAzANBgkqhkiG9w0BAQsFĪDBnMRMwEQYKCZImiZPyLGQBGRYDY29tMRIwEAYKCZImiZPyLGQBGRYCY3MxGDAWīgoJkiaJk/IsZAEZFghBRHNlcnZlcjEiMCAGA1UEAxMZQURzZXJ2ZXItQ1NQUTIw I:DC = com, DC = cs, DC = ADserver, CN = ADserver-CSPQ202WINSQL-CAĪ:PKEY: rsaEncryption, 2048 (bit) sigalg: RSA-SHA256 pemĭepth=1 DC = com, DC = cs, DC = ADserver, CN = ADserver-CSPQ202WINSQL-CAĭepth=0 CN = .com Openssl.exe s_client -no_tls1_3 -connect : -CAfile.
0 kommentar(er)
