1
아래 코드에서 핸드 셰이크하는 동안 오류 Got TLS error: FATAL alert returned by server: HANDSHAKE_FAILURE이 표시됩니다. 무슨 문제일까요?TLS 오류가 발생했습니다 : HANDSHAKE_FAILURE, wireshark가 핸드 셰이크 실패 (40)
#!/usr/bin/env python
# -*- coding: utf-8 -*-
from __future__ import with_statement
from __future__ import print_function
try:
# This import works from the project directory
from scapy_ssl_tls.ssl_tls import *
except ImportError:
# If you installed this package via pip, you just need to execute this
from scapy.layers.ssl_tls import *
tls_version = TLSVersion.TLS_1_2
# ciphers = [TLSCipherSuite.ECDHE_RSA_WITH_AES_128_GCM_SHA256]
# ciphers = [TLSCipherSuite.ECDHE_RSA_WITH_AES_256_CBC_SHA384]
# ciphers = [TLSCipherSuite.RSA_WITH_AES_128_CBC_SHA]
# ciphers = [TLSCipherSuite.RSA_WITH_RC4_128_SHA]
# ciphers = [TLSCipherSuite.DHE_RSA_WITH_AES_128_CBC_SHA]
# ciphers = [TLSCipherSuite.DHE_DSS_WITH_AES_128_CBC_SHA]
ciphers = [TLSCipherSuite.ECDHE_ECDSA_WITH_AES_128_GCM_SHA256]
extensions = [TLSExtension()/TLSExtECPointsFormat(),
TLSExtension()/TLSExtSupportedGroups()]
def tls_client(ip):
with TLSSocket(client=True) as tls_socket:
try:
print("kooo")
tls_socket.connect(ip)
print("Connected to server: %s" % (ip,))
except socket.timeout:
print("Failed to open connection to server: %s" % (ip,), file=sys.stderr)
else:
try:
server_hello, server_kex = tls_socket.do_handshake(tls_version, ciphers, extensions)
server_hello.show()
tls_socket.setsockopt(socket.SOL_IP, socket.IP_TTL, 20)
except TLSProtocolError as tpe:
print("Got TLS error: %s" % tpe, file=sys.stderr)
tpe.response.show()
else:
resp = tls_socket.do_round_trip(TLSPlaintext(data="GET/HTTP/1.1\r\nHost: pirate.trade\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.78 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8\r\nAccept-Encoding: gzip, deflate\r\nAccept-Language: en-GB,en-US;q=0.8,en;q=0.6\r\n"))
print("Got response from server")
resp.show()
# finally:
# print(tls_socket.tls_ctx)
if __name__ == "__main__":
if len(sys.argv) > 2:
server = (sys.argv[1], int(sys.argv[2]))
else:
server = ("pirate.trade", 443)
tls_client(server)
위의 코드는이 링크로 간주됩니다. https://github.com/tintinweb/scapy-ssl_tls/blob/master/examplesfull_rsa_connection_with_application_data.py
클라이언트 헬로 패킷을 가져 오는 동안 오류 
(이 패킷에 점점 오류) 오류를 가져 오는 동안 서버 안녕하세요 패킷은 논의의 대부분이 오류가 말하는 
는 일반적이지 때문이다 암호. 그러나 일반적인 암호가 있다는 것을 확인했습니다. 브라우저를 통해 웹 사이트를 여는 동안 아래 wireshark 결과를 참조하십시오.
이 때문에 SNI 확장 누락인가? 그렇다면 여기에 어떻게 추가 할 수 있습니까?