{"action":"created","issue":{"url":"https://api.github.com/repos/droe/sslsplit/issues/185","repository_url":"https://api.github.com/repos/droe/sslsplit","labels_url":"https://api.github.com/repos/droe/sslsplit/issues/185/labels{/name}","comments_url":"https://api.github.com/repos/droe/sslsplit/issues/185/comments","events_url":"https://api.github.com/repos/droe/sslsplit/issues/185/events","html_url":"https://github.com/droe/sslsplit/issues/185","id":294245529,"number":185,"title":"SSLv2ClientHello not supported","user":{"login":"stef","id":13735,"avatar_url":"https://avatars2.githubusercontent.com/u/13735?v=4","gravatar_id":"","url":"https://api.github.com/users/stef","html_url":"https://github.com/stef","followers_url":"https://api.github.com/users/stef/followers","following_url":"https://api.github.com/users/stef/following{/other_user}","gists_url":"https://api.github.com/users/stef/gists{/gist_id}","starred_url":"https://api.github.com/users/stef/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stef/subscriptions","organizations_url":"https://api.github.com/users/stef/orgs","repos_url":"https://api.github.com/users/stef/repos","events_url":"https://api.github.com/users/stef/events{/privacy}","received_events_url":"https://api.github.com/users/stef/received_events","type":"User","site_admin":false},"labels":[{"id":2685088,"url":"https://api.github.com/repos/droe/sslsplit/labels/bug","name":"bug","color":"207de5","default":true},{"id":2685090,"url":"https://api.github.com/repos/droe/sslsplit/labels/feature","name":"feature","color":"207de5","default":false},{"id":349753529,"url":"https://api.github.com/repos/droe/sslsplit/labels/priority","name":"priority","color":"5319e7","default":false}],"state":"open","locked":false,"assignee":{"login":"droe","id":749226,"avatar_url":"https://avatars3.githubusercontent.com/u/749226?v=4","gravatar_id":"","url":"https://api.github.com/users/droe","html_url":"https://github.com/droe","followers_url":"https://api.github.com/users/droe/followers","following_url":"https://api.github.com/users/droe/following{/other_user}","gists_url":"https://api.github.com/users/droe/gists{/gist_id}","starred_url":"https://api.github.com/users/droe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/droe/subscriptions","organizations_url":"https://api.github.com/users/droe/orgs","repos_url":"https://api.github.com/users/droe/repos","events_url":"https://api.github.com/users/droe/events{/privacy}","received_events_url":"https://api.github.com/users/droe/received_events","type":"User","site_admin":false},"assignees":[{"login":"droe","id":749226,"avatar_url":"https://avatars3.githubusercontent.com/u/749226?v=4","gravatar_id":"","url":"https://api.github.com/users/droe","html_url":"https://github.com/droe","followers_url":"https://api.github.com/users/droe/followers","following_url":"https://api.github.com/users/droe/following{/other_user}","gists_url":"https://api.github.com/users/droe/gists{/gist_id}","starred_url":"https://api.github.com/users/droe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/droe/subscriptions","organizations_url":"https://api.github.com/users/droe/orgs","repos_url":"https://api.github.com/users/droe/repos","events_url":"https://api.github.com/users/droe/events{/privacy}","received_events_url":"https://api.github.com/users/droe/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/droe/sslsplit/milestones/9","html_url":"https://github.com/droe/sslsplit/milestone/9","labels_url":"https://api.github.com/repos/droe/sslsplit/milestones/9/labels","id":3011660,"number":9,"title":"0.5.2","description":"","creator":{"login":"droe","id":749226,"avatar_url":"https://avatars3.githubusercontent.com/u/749226?v=4","gravatar_id":"","url":"https://api.github.com/users/droe","html_url":"https://github.com/droe","followers_url":"https://api.github.com/users/droe/followers","following_url":"https://api.github.com/users/droe/following{/other_user}","gists_url":"https://api.github.com/users/droe/gists{/gist_id}","starred_url":"https://api.github.com/users/droe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/droe/subscriptions","organizations_url":"https://api.github.com/users/droe/orgs","repos_url":"https://api.github.com/users/droe/repos","events_url":"https://api.github.com/users/droe/events{/privacy}","received_events_url":"https://api.github.com/users/droe/received_events","type":"User","site_admin":false},"open_issues":5,"closed_issues":2,"state":"open","created_at":"2018-01-03T22:39:34Z","updated_at":"2018-02-05T00:50:16Z","due_on":null,"closed_at":null},"comments":0,"created_at":"2018-02-05T00:27:18Z","updated_at":"2018-02-05T00:52:33Z","closed_at":null,"author_association":"NONE","body":"i'm getting these debug messages:\r\n```\r\nClientHello parser: parsing buffer of sz 54\r\nClientHello parser: candidate at offset 0\r\nClientHello parser: byte 0: 80\r\nClientHello parser: ===> No match: rv 1, *clienthello NULL\r\nPeeking did not yield a (truncated) ClientHello message, aborting connection\r\n```\r\nit seems i'm hitting this unhandled case: https://github.com/droe/sslsplit/blob/7bc9f8784280ccfd8304dec17adef5379238fb10/ssl.c#L1992\r\n\r\n## Output of `sslsplit -V`\r\n```\r\nSSLsplit 0.5.1 (built 2018-02-04)\r\nCopyright (c) 2009-2018, Daniel Roethlisberger <daniel@roe.ch>\r\nhttp://www.roe.ch/SSLsplit\r\nBuild info: V:FILE\r\nFeatures: -DDEBUG_CLIENTHELLO_PARSER -DHAVE_NETFILTER -DWITH_SSLV2\r\nNAT engines: netfilter* tproxy\r\nnetfilter: IP_TRANSPARENT IP6T_SO_ORIGINAL_DST\r\nLocal process info support: no\r\ncompiled against OpenSSL 1.0.2n  7 Dec 2017 (100020ef)\r\nrtlinked against OpenSSL 1.0.2n  7 Dec 2017 (100020ef)\r\nOpenSSL has support for TLS extensions\r\nTLS Server Name Indication (SNI) supported\r\nOpenSSL is thread-safe with THREADID\r\nUsing SSL_MODE_RELEASE_BUFFERS\r\nSSL/TLS protocol availability: ssl2 ssl3 tls10 tls11 tls12\r\nSSL/TLS algorithm availability: SHA0 RSA DSA ECDSA DH ECDH EC\r\nOpenSSL option availability: SSL_OP_NO_COMPRESSION SSL_OP_NO_TICKET SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION SSL_\r\nOP_TLS_ROLLBACK_BUG\r\ncompiled against libevent 2.1.8-stable\r\nrtlinked against libevent 2.1.8-stable\r\n4 CPU cores detected\r\n```\r\n## Exact command line arguments used to run `sslsplit`\r\n```\r\nsudo ./sslsplit -e tproxy -D -L sniff.log -c ./cert.pem https 10.17.17.1 10443\r\n```\r\n\r\n## Relevant part of debug mode (-D) output, if applicable\r\nsee above\r\n\r\n## NAT redirection rules you are using, if applicable\r\nseems irrelevant in this case.\r\n\r\n## The payload looks like this:\r\n\r\nhttps://www.ctrlc.hu/~stef/sslv2.png\r\n"},"comment":{"url":"https://api.github.com/repos/droe/sslsplit/issues/comments/362955387","html_url":"https://github.com/droe/sslsplit/issues/185#issuecomment-362955387","issue_url":"https://api.github.com/repos/droe/sslsplit/issues/185","id":362955387,"user":{"login":"droe","id":749226,"avatar_url":"https://avatars3.githubusercontent.com/u/749226?v=4","gravatar_id":"","url":"https://api.github.com/users/droe","html_url":"https://github.com/droe","followers_url":"https://api.github.com/users/droe/followers","following_url":"https://api.github.com/users/droe/following{/other_user}","gists_url":"https://api.github.com/users/droe/gists{/gist_id}","starred_url":"https://api.github.com/users/droe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/droe/subscriptions","organizations_url":"https://api.github.com/users/droe/orgs","repos_url":"https://api.github.com/users/droe/repos","events_url":"https://api.github.com/users/droe/events{/privacy}","received_events_url":"https://api.github.com/users/droe/received_events","type":"User","site_admin":false},"created_at":"2018-02-05T00:52:33Z","updated_at":"2018-02-05T00:52:33Z","author_association":"OWNER","body":"The fact that it affects setups other than `autossl` makes this a bug; that the ClientHello peeking does not support SSLv2 yet is a missing feature. In any case something that should be remedied."}}
{"actor":{"display_login":"droe"}}