sexta-feira, 3 de janeiro de 2020

Solicitação do cliente "Handshake" dos protocolos SSL/TLS:
Exemplo de solicitação TLS
IP: 108.174.12.129
SITE: www.linkedin.com

\\TLSv1.2 Record Layer: Handshake Protocol: Client Hello
Content Type: Handshake (22)
Version: TLS 1.0 (0x0301)
Length: 512
\\Handshake Protocol: Client Hello
Handshake Type: Client Hello (1)
Length: 508
Version: TLS 1.2 (0x0303)
Random: 68bd2c33314c40b012e2ee919ae25xxxxxxxxxxxxxxxxxxxx…
GMT Unix Time: Sep  7, 2025 03:54:43.000000000 Hora oficial do Brasil
Random Bytes: 314c40b012e2ee919ae25dcfxxxxxxxxxxxxxxxxxxxx…
Session ID Length: 32
Session ID: c27fabde0f5b9b4b5d3f2dbe583xxxxxxxxxxxxxxxxxxxx…
Cipher Suites Length: 36

Cipher Suites (18 suites)
{
    Cipher Suite: TLS_AES_128_GCM_SHA256 (0x1301)
    Cipher Suite: TLS_CHACHA20_POLY1305_SHA256 (0x1303)
    Cipher Suite: TLS_AES_256_GCM_SHA384 (0x1302)
    Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b)
    Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)
    Cipher Suite: TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca9)
    Cipher Suite: TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca8)
    Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (0xc02c)
    Cipher Suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)
    Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a)
    Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009)
    Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)
    Cipher Suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014)
    Cipher Suite: TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x0033)
    Cipher Suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x0039)
    Cipher Suite: TLS_RSA_WITH_AES_128_CBC_SHA (0x002f)
    Cipher Suite: TLS_RSA_WITH_AES_256_CBC_SHA (0x0035)
    Cipher Suite: TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a)
}
Compression Methods Length: 1

Compression Methods (1 method)
{
    Compression Method: null (0)
}
Extensions Length: 399

Extension: server_name (len=20)
{
    Type: server_name (0)
    Length: 20
}

Server Name Indication extension
{
    Server Name list length: 18
    Server Name Type: host_name (0)
    Server Name length: 15
    Server Name: beacon.krxd.net
}

Extension: extended_master_secret (len=0)
{
    Type: extended_master_secret (23)
    Length: 0
}

Extension: renegotiation_info (len=1)
{
    Type: renegotiation_info (65281)
    Length: 1
    Renegotiation Info extension
    {
        Renegotiation info extension length: 0
    }
}

Extension: supported_groups (len=14)
{
    Type: supported_groups (10)
    Length: 14
    Supported Groups List Length: 12
    Supported Groups (6 groups)
    {
        Supported Group: x25519 (0x001d)
        Supported Group: secp256r1 (0x0017)
        Supported Group: secp384r1 (0x0018)
        Supported Group: secp521r1 (0x0019)
        Supported Group: ffdhe2048 (0x0100)
        Supported Group: ffdhe3072 (0x0101)
    }
}

Extension: ec_point_formats (len=2)
{
    Type: ec_point_formats (11)
    Length: 2
    EC point formats Length: 1

    Elliptic curves point formats (1)
    {
        EC point format: uncompressed (0)
    }

    Extension: application_layer_protocol_negotiation (len=14)
    {
        Type: application_layer_protocol_negotiation (16)
        Length: 14
        ALPN Extension Length: 12
    }

    ALPN Protocol
    {
        ALPN string length: 2
        ALPN Next Protocol: h2
        ALPN string length: 8
        ALPN Next Protocol: http/1.1
    }

}

Extension: status_request (len=5)
{
    Type: status_request (5)
    Length: 5
    Certificate Status Type: OCSP (1)
    Responder ID list Length: 0
    Request Extensions Length: 0
}

Extension: key_share (len=107)
{
Type: key_share (51)
Length: 107
    Key Share extension
    {
        Client Key Share Length: 105
        Key Share Entry: Group: x25519, Key Exchange length: 32
        {
            Group: x25519 (29)
            Key Exchange Length: 32
            Key Exchange: 7d43208fb20d019493d8266b622efae94331657ca5ffc7cd…
        }

        Key Share Entry: Group: secp256r1, Key Exchange length: 65
        {
            Group: secp256r1 (23)
            Key Exchange Length: 65
            Key Exchange: 04d3b9dc8994c4172b1c8cd46d5c93088c8f53b07a1b9b72…
        }
    }
}

Extension: supported_versions (len=9)
{
    Type: supported_versions (43)
    Length: 9
    Length: 9
    Supported Version: TLS 1.3 (0x0304)
    Supported Version: TLS 1.2 (0x0303)
    Supported Version: TLS 1.1 (0x0302)
    Supported Version: TLS 1.0 (0x0301)
}

Extension: signature_algorithms (len=24)
{
    Type: signature_algorithms (13)
    Length: 24
    Signature Hash Algorithms Length: 22
    Signature Hash Algorithms (11 algorithms)
    {
        Signature Algorithm: ecdsa_secp256r1_sha256 (0x0403)
        {
        Signature Hash Algorithm Hash: SHA256 (4)
        Signature Hash Algorithm Signature: ECDSA (3)
        }
        Signature Hash Algorithm Signature: ECDSA (3)
        {
        Signature Hash Algorithm Hash: SHA384 (5)
        Signature Hash Algorithm Signature: ECDSA (3)
        }
        Signature Algorithm: ecdsa_secp521r1_sha512 (0x0603)
        {
        Signature Hash Algorithm Hash: SHA512 (6)
        Signature Hash Algorithm Signature: ECDSA (3)
        }
        Signature Algorithm: rsa_pss_rsae_sha256 (0x0804)
        {
        Signature Hash Algorithm Hash: Unknown (8)
        Signature Hash Algorithm Signature: Unknown (4)
        }
        Signature Algorithm: rsa_pss_rsae_sha384 (0x0805)
        {
        Signature Hash Algorithm Hash: Unknown (8)
        Signature Hash Algorithm Signature: Unknown (5)
        }
        Signature Algorithm: rsa_pss_rsae_sha512 (0x0806)
        {
        Signature Hash Algorithm Hash: Unknown (8)
        Signature Hash Algorithm Signature: Unknown (6)
        }
        Signature Algorithm: rsa_pkcs1_sha256 (0x0401)
        {
        Signature Hash Algorithm Hash: SHA256 (4)
        Signature Hash Algorithm Signature: RSA (1)
        }
        Signature Algorithm: rsa_pkcs1_sha384 (0x0501)
        {
        Signature Hash Algorithm Hash: SHA384 (5)
        Signature Hash Algorithm Signature: RSA (1)
        }
        Signature Algorithm: rsa_pkcs1_sha512 (0x0601)
        {
        Signature Hash Algorithm Hash: SHA512 (6)
        Signature Hash Algorithm Signature: RSA (1)
        }
        Signature Algorithm: ecdsa_sha1 (0x0203)
        {
        Signature Hash Algorithm Hash: SHA1 (2)
        Signature Hash Algorithm Signature: ECDSA (3)
        }
        Signature Algorithm: rsa_pkcs1_sha1 (0x0201)
        {
        Signature Hash Algorithm Hash: SHA1 (2)
        Signature Hash Algorithm Signature: RSA (1)
        }
    }
}

Extension: record_size_limit (len=2)
{
    Type: record_size_limit (28)
    Length: 2
    Record Size Limit: 16385
}

Extension: padding (len=153)
{
    Type: padding (21)
    Length: 153
    Padding Data: 000000000000000000000000000000000000000000000000…
}

Nenhum comentário:

Postar um comentário