Issue with Handling Invalid or Malformed TLS/DTLS Handshake Messages
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 944
- Forks
- 440
- Avg merge
- 1d 6h
- Merged PRs (30d)
- 6
Description
I am working with a TLS/DTLS library and need to handle various scenarios involving invalid or malformed handshake messages. Specifically, I am interested in support for the following:
- Invalid Handshake Messages
- Malformed Handshake Messages
- Unrecognized Extensions
I would like to understand if the library or framework supports these scenarios, or if there are plans to support them. Handling these scenarios is crucial for robust security testing and debugging.
Example Scenario:
For context, here’s a simplified example of how these scenarios might occur:
Invalid Handshake Message: A client sends a handshake message with an incorrect format or unsupported protocol version.
Malformed Handshake Message: A server receives a handshake message with corrupted data.
Unrecognized Extension: A client includes a custom extension in the handshake message that the server does not recognize or support.
If there are existing solutions, workarounds, or updates planned for handling these scenarios, I would appreciate any relevant information or resources.
Thank you for your assistance!
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing pyOpenSSL's current TLS/DTLS handshake handling and its OpenSSL integration. Determine whether invalid or malformed messages and unrecognized extensions are currently supported, and identify the expected behavior or scope for adding support. Done means documenting the current behavior or defining an actionable implementation plan.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- networking, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100