🚀 go-pugleaf

Hi all

I've captured a Client-Hello with my sniffer from Netscape 3.0 to a
Sioux-server 1.0.1 which understands only SSL2.


The configuration in the Netscape browser: 

      SSL2                                              disabled
      SSL3                                              enabled 
      RC4 encryption with a 40-bit key and an MD5 MAC   enabled
      RC2 encryption with a 40-bit key and an MD5 MAC   disabled
      No encryption with an MD5 MAC                     disabled 

(I'm absolutly sure that this configuration is set.)

Netscape browser is installed on two machines on a PC and on a SUN.

My Questions:

- Why Netscape sends with the settings from above in the Client-Hello
  a RC2-CBC-128(40)-MD5 ciphers. This occures by connecting from the PC?

- Why Netscape sends with the settings from above in the Client-Hello
  a RC2-CBC-128(40)-MD5 and RC4-128(40)-MD5 ciphers.This occures by 
  connecting from the SUN?

- Why couldn't I connect to my Server with the settings from above? I've
  heard from different people that Netscape sends a SSL2-format
Client-Hello,
  because of this reason the Sioux-server should understand the
Client-Hello.

- Netscape 3.0 sends only 16 bytes of Random data when it does an
SSLv2-format 
  Client-Hello. The V3 spec says that the full 32 bytes is legal.I think
it's bad
  they should send the full 32 bytes.


Thank's in advance

			Roger Auinger



roger.auinger@itr.ch
http://www.itr.ch:8000/~rauinger/