Administrace komentářů

Tak po zapnuti "-msg" vidno, ci sa posiela klientsky certifikat:

...

>>> ??? [length 0005]
    16 03 03 04 ab
>>> TLS 1.2Handshake [length 04ab], Certificate
    0b 00 04 a7 00 04 a4 00 04 a1 30 82 04 9d 30 82
    02 85 a0 03 02 01 02 02 09 00 f0 bb 28 c1 63 7e
...
    d2 a2 fd 76 e1 65 54 7b 45 88 f8 28 2a b1 1d 25
    a3 55 50 be cd 1b da 69 17 ca 51
SSL_connect:SSLv3/TLS write client certificate

...

Ak sa neposiela, tak to vyzera takto:

...

>>> ??? [length 0005]
    16 03 03 00 07
>>> TLS 1.2Handshake [length 0007], Certificate
    0b 00 00 03 00 00 00
SSL_connect:SSLv3/TLS write client certificate

...

Este krajsie to vidno ak sa pri kompilacii OpenSSL zapne "enable-ssl-trace" a pri pustani s_client sa prida option "-trace". Pravdepodobne to ale znamena vlastnu kompilacii OpenSSL, pretoze to tusim nie je default.

Pri "-trace" je vo vypise info o posielanom certifikate a potom aj cely certifikat jak v parsovanej forme, tak aj v BASE64

...

Sent Record
Header:
  Version = TLS 1.2 (0x303)
  Content Type = Handshake (22)
  Length = 1195
    Certificate, Length=1191
      certificate_list, length=1188
        ASN.1Cert, length=1185
------details-----
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f0:bb:28:c1:63:7e:c9:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, ST = California, L = San Francisco, O = BadSSL, CN = BadSSL Client Root Certificate Authority
        Validity
            Not Before: Nov 16 05:36:33 2017 GMT
            Not After : Nov 16 05:36:33 2019 GMT
        Subject: C = US, ST = California, L = San Francisco, O = BadSSL, CN = BadSSL Client Certificate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c7:37:5f:11:eb:1e:4e:cf:eb:ba:48:e5:cb:a3:
                    12:2c:73:3e:46:1d:1e:9c:0d:c0:8b:83:23:da:c7:
...
         be:cd:1b:da:69:17:ca:51
-----BEGIN CERTIFICATE-----
MIIEnTCCAoWgAwIBAgIJAPC7KMFjfslXMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNV
...
Ioacp9qb0qL9duFlVHtFiPgoKrEdJaNVUL7NG9ppF8pR
-----END CERTIFICATE-----
------------------

SSL_connect:SSLv3/TLS write client certificate

...

Ak client certificate posielany nebol, tak :

...

Sent Record
Header:
  Version = TLS 1.2 (0x303)
  Content Type = Handshake (22)
  Length = 7
    Certificate, Length=3
      certificate_list, length=0

SSL_connect:SSLv3/TLS write client certificate

...