BLOG     |     FORUM
Welcome, Guest
Username: Password: Remember me
All your questions answered real quick by Unleash Networks Engineers.

TOPIC: Finished decryption failure on Hello_Request

Re:Finished decryption failure on Hello_Request 14 years 8 months ago #110

  • ashokeng@gmail.com
  • ashokeng@gmail.com's Avatar
Hi vivek,
The logs and private key had been sent to you again.Please check it out.

Regards,
C.Ashok kumar:)
The administrator has disabled public write access.

Re:Finished decryption failure on Hello_Request 14 years 8 months ago #111

  • netscript
  • netscript's Avatar
Ashok,

We are looking at it right now. I will get back to you as soon as we find something.

Thanks for the report,
Vivek Rajan
Unleash Networks
The administrator has disabled public write access.

Re:Finished decryption failure on Hello_Request 14 years 8 months ago #112

  • netscript
  • netscript's Avatar
Hello,

I sent you an email to your yahoo account.

We fixed a problem when Unsniff was dealing with a HelloRequest under certain circumstances. This enables Unsniff to continue decrypting beyond this point. We are therefore able to reassemble one of the two pages and show the HTML. The other page however still has problems.

I included a link to a private build in the email.
The email also contains a lot of description about the problem that cant be discussed publicly.

Thanks for the report,

Regards,
Vivek Rajan
Unleash Networks
The administrator has disabled public write access.

Re:Finished decryption failure on Hello_Request 14 years 8 months ago #113

  • ashokeng@gmail.com
  • ashokeng@gmail.com's Avatar
Hi vivek,
Answers to your queries in the previous mail whic you had sent.

page2.html is loaded without any error.This page alone is configured as a client authentication page in apache.

Iam using the apache version 2.2.4.The page2.html can be viewed by selecting any of the certificate and moreover it can also be a self signed one.

Thank you for the bug-fix.

Regards,
C.Ashok kumar
The administrator has disabled public write access.

Re:Finished decryption failure on Hello_Request 14 years 8 months ago #114

  • ashokeng@gmail.com
  • ashokeng@gmail.com's Avatar
Hi vivek,

Now Iam using unsniff 1.0.1.1232. This build also has the decryption problem as said in the previous Posts.

Regards,
C.Ashok kumar
The administrator has disabled public write access.

Re:Finished decryption failure on Hello_Request 14 years 8 months ago #115

  • netscript
  • netscript's Avatar
Hi,

An update about the bug (good news!)

I also sent you an email to your yahoo account.

We have tracked down the bug to a problem with handling apache piggyback handshake messages. This bug only affects piggyback handshakes used for session renegotiation.

The bug has subsequently been fixed.

Unsniff is able to now reassemble, decrypt and show both your pages (index.html and page2.html).

Please download our latest private build from www.unleashnetworks.com/lib/private/setu...iff_R_1_0_1_1234.msi

Appreciate your help.

Best Regards,
Vivek Rajan
The administrator has disabled public write access.
Moderators: vivek [unleash]
Time to create page: 0.029 seconds