botg wrote:
If you look at the earlier dump:
GnuTLS, as invoked by FileZilla, requests use of TLS 1.2 (03 03).
Note that the SSL3 record layer version (03 00) does not matter here, it is in fact this is perfectly valid behavior:
Assuming the problem is just the SSL3 record layer version, I see no reason to act on my side. The server needs to be fixed.
Quote:
0000000A 16 03 00 00 a9 01 00 00 a5 03 03 51 51 c9 40 5e ........ ...QQ.@^
GnuTLS, as invoked by FileZilla, requests use of TLS 1.2 (03 03).
Note that the SSL3 record layer version (03 00) does not matter here, it is in fact this is perfectly valid behavior:
Assuming the problem is just the SSL3 record layer version, I see no reason to act on my side. The server needs to be fixed.
No. You have the SAME fault as in the earlier dump. The outer wrapper says SSL 3.0, and the inner wrapper says TLS 1.2. This is contrary to how the IE and MS does it in my other test. It will specify 1.2 in both.
Placing your trust in "MAY" statement, is a weak excuse. Better code will result if you follow the SHOULD definitions.
Code:
/...I see no reason to act on my side. The server needs to be fixed.
This kind of ignorance, will not fix your problems. Its also offensive and highlights a naive approach to your coding styles. Wake up. If you want your program to function in a fully TLS 1.2 and secure world, then you are going to have to catch up to reality.
I can see I wasted my time here. thanks.