Robert Relyea wrote, On 2008-01-16 17:01:
>> Question ======
>>
>> Why is Firefox a ClientHelloV2, although SSL v2 is disabled in Firefox
>> 2?
>>
> This is a big question. Firefox2 has turned on a number of SSL3/TLS
> extensions which require and SSL3 hello. I suspect that for some reason
> you don't really have SSL2 turned off (and old profile?). We know that
> we are sending SSL3 hello's because we can connect to sites that require
> them.
>
> bob
>> Logs =====
>>
>> From what I can see in the logs of ssltap, Firefox is sending some
>> data, which might be something like a partial handshake (?).
>> --> [
>> alloclen = 63 bytes
>> (63 bytes of 63)
>> [Wed Jan 09 12:18:41 2008] [ssl2] ClientHelloV2 {
>> version = {0x03, 0x00}
Bob, An SSLv2 format client hello advertising SSL 3.0 is what we send
out to "TLS intolerant" servers.
Stefan, you've begun exploratory surgery on the patient, but haven't yet
recorded the patient's temperature and blood pressure (IOW, the basics).
What error does FF report when trying to connect to your server?
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
