Help and Support
Ask a question, report a problem, request a feature...
<<  Back To Forum

Tix 2.17a5 TLS SNI, Drop the port from the SNI field.

by Napsterbater on 2015/10/13 04:24:40 AM    
Tixati is sending this is the SNI field.

Server Name: subdomain.domain.tld:port

It should only send the hostname, like this

Server Name: subdomain.domain.tld



Almost there, glad to see this is making it into the 2.17
by Napsterbater on 2015/10/13 04:35:20 AM    
Since its not working yet I can't tell but, confirm when redirected (HTTP 301/2/3) the new hostname is sent in the field as well.


Again thanks for the hard work.
by Napsterbater on 2015/10/13 10:29:11 AM    
This bug has made it into 2.18
by Guest on 2015/10/13 12:10:23 PM    
No, this bug has indeed been fixed for 2.18, you can verify this by looking at a packet dump such as tcpdump or wireshark.



SSL handshake for example endpoint testing.tixati.com:52222.

This is 2.17a5 handshake packet (note the host with port right in the middle):

0x0000:  4500 0186 835b 4000 4006 cbfe 188c ed3b  E....[@.@......;
0x0010:  4055 a3fb c44e cbfe 97ee 690f 7c23 3da3  @U...N....i.|#=.
0x0020:  8018 00e3 531e 0000 0101 080a 136f f3dc  ....S........o..
0x0030:  c895 e5ab 1603 0101 4d01 0001 4903 0314  ........M...I...
0x0040:  7f73 e315 3eb1 3493 aab3 71ed 0626 ed7e  .s..>.4...q..&.~
0x0050:  ea52 9aa9 e8a9 92e7 1a3f f789 500e 9c00  .R.......?..P...
0x0060:  0092 c030 c02c c028 c024 c014 c00a 00a3  ...0.,.(.$......
0x0070:  009f 006b 006a 0039 0038 0088 0087 c032  ...k.j.9.8.....2
0x0080:  c02e c02a c026 c00f c005 009d 003d 0035  ...*.&.......=.5
0x0090:  0084 c02f c02b c027 c023 c013 c009 00a2  .../.+.'.#......
0x00a0:  009e 0067 0040 0033 0032 009a 0099 0045  ...g.@.3.2.....E
0x00b0:  0044 c031 c02d c029 c025 c00e c004 009c  .D.1.-.).%......
0x00c0:  003c 002f 0096 0041 c011 c007 c00c c002  .<./...A........
0x00d0:  0005 0004 c012 c008 0016 0013 c00d c003  ................
0x00e0:  000a 0015 0012 0009 0014 0011 0008 0006  ................
0x00f0:  0003 00ff 0100 008e 0000 001d 001b 0000  ................
0x0100:  1874 6573 7469 6e67 2e74 6978 6174 692e  .testing.tixati.
0x0110:  636f 6d3a 3532 3232 3200 0b00 0403 0001  com:52222.......
0x0120:  0200 0a00 3400 3200 0e00 0d00 1900 0b00  ....4.2.........
0x0130:  0c00 1800 0900 0a00 1600 1700 0800 0600  ................
0x0140:  0700 1400 1500 0400 0500 1200 1300 0100  ................
0x0150:  0200 0300 0f00 1000 1100 2300 0000 0d00  ..........#.....
0x0160:  2000 1e06 0106 0206 0305 0105 0205 0304  ................
0x0170:  0104 0204 0303 0103 0203 0302 0102 0202  ................
0x0180:  0300 0f00 0101                           ......


and now look at 2.18:


0x0000:  4500 0180 a986 4000 4006 a5d9 188c ed3b  E.....@.@......;
0x0010:  4055 a3fb c40b cbfe be9b b630 5688 86f5  @U.........0V...
0x0020:  8018 00e3 a631 0000 0101 080a 136b 1fcc  .....1.......k..
0x0030:  c891 162a 1603 0101 4701 0001 4303 0339  ...*....G...C..9
0x0040:  70f9 4e00 42cf 4101 a0c6 8496 0264 95dd  p.N.B.A......d..
0x0050:  33c1 f2f1 7872 b6b2 0ce9 d15a a6ca 6e00  3...xr.....Z..n.
0x0060:  0092 c030 c02c c028 c024 c014 c00a 00a3  ...0.,.(.$......
0x0070:  009f 006b 006a 0039 0038 0088 0087 c032  ...k.j.9.8.....2
0x0080:  c02e c02a c026 c00f c005 009d 003d 0035  ...*.&.......=.5
0x0090:  0084 c02f c02b c027 c023 c013 c009 00a2  .../.+.'.#......
0x00a0:  009e 0067 0040 0033 0032 009a 0099 0045  ...g.@.3.2.....E
0x00b0:  0044 c031 c02d c029 c025 c00e c004 009c  .D.1.-.).%......
0x00c0:  003c 002f 0096 0041 c011 c007 c00c c002  .<./...A........
0x00d0:  0005 0004 c012 c008 0016 0013 c00d c003  ................
0x00e0:  000a 0015 0012 0009 0014 0011 0008 0006  ................
0x00f0:  0003 00ff 0100 0088 0000 0017 0015 0000  ................
0x0100:  1274 6573 7469 6e67 2e74 6978 6174 692e  .testing.tixati.
0x0110:  636f 6d00 0b00 0403 0001 0200 0a00 3400  com...........4.
0x0120:  3200 0e00 0d00 1900 0b00 0c00 1800 0900  2...............
0x0130:  0a00 1600 1700 0800 0600 0700 1400 1500  ................
0x0140:  0400 0500 1200 1300 0100 0200 0300 0f00  ................
0x0150:  1000 1100 2300 0000 0d00 2000 1e06 0106  ....#...........
0x0160:  0206 0305 0105 0205 0304 0104 0204 0303  ................
0x0170:  0103 0203 0302 0102 0202 0300 0f00 0101  ................

by Napsterbater on 2015/10/13 07:32:25 PM    
You are right, confirmed this was fixed 2.18. My bad.




This web site is powered by Super Simple Server