Ich habe den WLC und den problematischen AP jetzt auf LCOS 9.04RU2 aktualisiert.
Im Changelog steht, dass in der 9.04RU1 ein Problem mit dem SCEP-Client behoben wurde, wenn das Flag "Fragmentation needed" bei einer Zertifikatsanforderung gesendet wurde.
Leider gibts trotz aktueller Firmware keine erfolgreiche Verbindung mit diesem AP.
Ich habe jedoch auf dem AP einen DTLS-Trace laufen lassen und es sieht für mich so aus, als würde der WLC einige Verbindungen "durcheinander" bringen. Wie man im Trace sieht, scheint der DTLS-Handshake wie in einer Art Schleife zu hängen.
Ganz oben wieder zuerst der Abbruch der Verbindung. Die unteren Einträge zeigen dann den CAPWAP(DTLS)-Verbindungsaufbau, welcher sich aber bis zum Abbruch immer wiederholt.
Code: Alles auswählen
[DTLS] 2014/12/16 17:15:17,133 Devicetime: 2014/12/16 17:15:17,019
requested abort for connection reference 194
-> destroying connection
[DTLS] 2014/12/16 17:15:17,133 Devicetime: 2014/12/16 17:15:17,020
Received connect failure from TLS for connection reference 195
-> connection not found
[DTLS] 2014/12/16 17:15:35,914 Devicetime: 2014/12/16 17:15:35,976
Received start call for DTLS connection, desired role is client
-> Success, DTLS connection reference is 196, TLS connection reference is 197
[DTLS] 2014/12/16 17:15:35,914 Devicetime: 2014/12/16 17:15:35,977
Received TLS data to send for connection reference 196
-> record type is HANDSHAKE
-> generating fragment of length 83
Send packet(s) via connection reference 196 (1 fragments to send)
--> SSL/TLS Record
Record Content Type : Handshake
Record Length : 95
Protocol Version : DTLSv1
Epoch : 0
Record Seq. Number : 0
Handshake Msg Type : Client Hello
Message Length : 83
Message Sequence : 0
Fragment Offset : 0
Fragment Length : 83
-->SSL/TLS Client Hello
Protocol Version : DTLSv1
Client Random : 54 90 5a a7 a1 cf 2e 9e T.Z.....
b8 09 d8 13 06 a2 00 f3 ........
b9 ee 8c 80 6f 38 44 28 ....o8D(
b3 61 5b 84 44 9a e0 30 .a[.D..0
Cipher Suites : TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
TLS_DHE_RSA_WITH_AES_256_CBC_SHA
TLS_RSA_WITH_AES_256_CBC_SHA
TLS_DHE_RSA_WITH_AES_128_CBC_SHA
TLS_RSA_WITH_AES_128_CBC_SHA
TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
TLS_RSA_WITH_3DES_EDE_CBC_SHA
Compression Methods : NULL
Reneg. Info :
Elliptic Curves : secp256r1
secp384r1
secp521r1
EC-Point Formats : uncompressed
[DTLS] 2014/12/16 17:15:35,960 Devicetime: 2014/12/16 17:15:36,044
Received Data via connection reference 196, initial offset is 144
--> SSL/TLS Record
Record Content Type : Handshake
Record Length : 63
Protocol Version : DTLSv1
Epoch : 0
Record Seq. Number : 0
Handshake Msg Type : Server Hello
Message Length : 51
Message Sequence : 0
Fragment Offset : 0
Fragment Length : 51
-->SSL/TLS Server Hello
Protocol Version : DTLSv1
Server Random : 54 90 5a a7 79 d2 3e 57 T.Z.y.>W
f9 7e aa ef b0 61 73 a2 .~...as.
e5 7b f9 00 2b 10 71 22 .{..+.q"
2d 65 dc 5f 67 65 fd 40 -e._ge.@
Cipher Suite : TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
Compression Method : NULL
Reneg. Info :
EC-Point Formats : uncompressed
-> processing record with hdr at offset 144
-> record type handshake, handing to handshake reassembly
-> received 63 bytes of handshake msg data for reassembly
-> processing handshake message fragment
-> handshake message seq 0, total length 51, fragment of 51 bytes at offset 0
-> first fragment of handshake message
-> handshake message 0 complete, handing to TLS
[DTLS] 2014/12/16 17:15:35,960 Devicetime: 2014/12/16 17:15:36,047
Received Data via connection reference 196, initial offset is 144
--> SSL/TLS Record
Record Content Type : Handshake
Record Length : 558
Protocol Version : DTLSv1
Epoch : 0
Record Seq. Number : 2
Handshake Msg Type : Certificate
Message Length : 1889
Message Sequence : 1
Fragment Offset : 1343
Fragment Length : 546
-->SSL/TLS Certificate(s)
Message Fragment : 01 31 c4 e0 6d 22 f7 9d .1..m"..
ee c9 ab 7c 36 c7 a3 9a ...|6...
fa ff 17 70 c6 65 91 50 ...p.e.P
4d 76 eb b8 92 e6 50 b8 Mv....P.
5f a8 6e 63 02 28 a4 d1 _.nc.(..
93 f0 51 81 72 cf b7 97 ..Q.r...
04 15 01 38 8d f2 e0 87 ...8....
3e e4 ed 46 90 5c ce df >..F.\..
82 61 db db 6f 40 82 de .a..o@..
bd 23 51 e3 6a 99 d4 27 .#Q.j..'
45 73 25 54 8b 35 6c 1d Es%T.5l.
cb 17 02 03 01 00 01 a3 ........
81 ac 30 81 a9 30 12 06 ..0..0..
03 55 1d 13 01 01 ff 04 .U......
08 30 06 01 01 ff 02 01 .0......
00 30 0e 06 03 55 1d 0f .0...U..
01 01 ff 04 04 03 02 01 ........
c6 30 1d 06 03 55 1d 0e .0...U..
04 16 04 14 be 97 66 46 ......fF
92 70 64 04 07 04 49 8e .pd...I.
cc 7b fd f2 57 42 84 be .{..WB..
30 64 06 03 55 1d 23 04 0d..U.#.
5d 30 5b 80 14 be 97 66 ]0[....f
46 92 70 64 04 07 04 49 F.pd...I
8e cc 7b fd f2 57 42 84 ..{..WB.
be a1 3e a4 3c 30 3a 31 ..>.<0:1
0b 30 09 06 03 55 04 06 .0...U..
13 02 44 45 31 17 30 15 ..DE1.0.
06 03 55 04 0a 13 0e 4c ..U....L
41 4e 43 4f 4d 20 53 59 ANCOM SY
53 54 45 4d 53 31 12 30 STEMS1.0
10 06 03 55 04 03 13 09 ...U....
4c 41 4e 43 4f 4d 20 43 LANCOM C
41 82 03 10 93 e6 30 0d A.....0.
06 09 2a 86 48 86 f7 0d ..*.H...
01 01 04 05 00 03 82 01 ........
01 00 47 a5 61 73 e0 7d ..G.as.}
4d 71 73 b7 84 c5 b0 83 Mqs.....
64 2b 14 6f 51 4e c5 56 d+.oQN.V
2f 4f 2e 6d be 45 49 83 /O.m.EI.
27 8b 0a 75 e5 bb 69 3a '..u..i:
47 66 92 90 1b 4c dc f1 Gf...L..
6a 0d 8e 8d 1f 81 10 6f j......o
06 6f b9 5a b0 ca 0e 0b .o.Z....
5e 56 fd 3b f0 f7 f3 9a ^V.;....
15 47 f1 88 a0 0a 82 7c .G.....|
24 6f cf e3 ba 08 ef 7f $o......
4c ca 2f 25 e4 22 d7 c4 L./%."..
3d 92 d4 d5 02 ec 06 6b =......k
73 1d 0b a6 1e 33 fd 54 s....3.T
75 55 91 dd af 12 a4 04 uU......
1d 71 47 42 ae bd 27 2d .qGB..'-
75 c9 b2 42 14 4a a9 35 u..B.J.5
12 42 6f 96 d3 44 8e e7 .Bo..D..
8f 72 d3 b3 87 57 5f 74 .r...W_t
a7 84 72 48 96 63 b3 65 ..rH.c.e
16 c6 ce b5 17 74 fa 54 .....t.T
c1 5f e6 80 1d d8 0e e6 ._......
e0 e6 00 20 0d ae 53 4f ... ..SO
c1 bd 8d c6 01 de 83 9d ........
be 93 a8 c7 e7 d7 7b e5 ......{.
72 fd 23 b0 00 b4 c3 1e r.#.....
65 da 1b 49 e9 78 1b 7f e..I.x..
47 4d d9 3c e0 13 e0 05 GM.<....
74 87 f0 6e 41 ca 81 86 t..nA...
68 fa 1d d2 69 3b 5f a8 h...i;_.
bc f4 c0 b6 4e b1 fd 61 ....N..a
2d a3 f0 dd c3 24 a6 37 -....$.7
4a 51 JQ
--> SSL/TLS Record
Record Content Type : Handshake
Record Length : 339
Protocol Version : DTLSv1
Epoch : 0
Record Seq. Number : 3
Handshake Msg Type : Server KeyExchange
Message Length : 327
Message Sequence : 2
Fragment Offset : 0
Fragment Length : 327
Message Body : 03 00 17 41 04 0c 6f 66 ...A..of
f7 cd 42 03 bc 80 f2 ba ..B.....
f9 ad 5f 2f 67 7d 69 76 .._/g}iv
5d 79 22 e7 5a 25 16 c6 ]y".Z%..
45 5a b0 e2 c3 71 8b 4e EZ...q.N
06 47 ac 57 9d 39 36 8b .G.W.96.
62 ed ab a3 30 c5 52 f9 b...0.R.
ff 57 11 1a 98 6c 34 3c .W...l4<
b1 b0 98 78 84 01 00 02 ...x....
95 80 1a 25 c9 31 da d4 ...%.1..
42 e1 3a df c9 b6 26 4e B.:...&N
a6 e6 6e 74 c6 93 a8 fd ..nt....
b5 c9 18 e3 e5 42 f6 69 .....B.i
ac 3a 6c 02 50 35 c6 f7 .:l.P5..
8a 62 e3 9a 46 e0 6c 63 .b..F.lc
10 ca 10 6f 02 26 39 b7 ...o.&9.
cb 25 da 63 8a 26 ba eb .%.c.&..
d8 98 3c 8e 52 7f 69 59 ..<.R.iY
15 53 90 37 82 bf ea fa .S.7....
70 70 95 77 a4 6e ef fa pp.w.n..
55 97 5a 1b 64 3f d9 f0 U.Z.d?..
62 57 41 00 c6 f7 ee 23 bWA....#
fb 56 b3 41 4e 05 73 fd .V.AN.s.
47 49 94 fc 01 6a 21 e4 GI...j!.
99 48 af bc 7f 63 e1 b3 .H...c..
dc dc c2 44 3f 30 d3 b0 ...D?0..
f5 69 05 e0 5e 95 cb 34 .i..^..4
33 2a a9 f5 30 17 bc 91 3*..0...
b1 dd bc 2e 95 56 84 3c .....V.<
49 4c 5c 89 e2 a1 e3 1a IL\.....
85 5e 76 cc 81 8f 47 af .^v...G.
e6 2e a3 3d 5a 5a 47 98 ...=ZZG.
02 f7 2f 7d 89 3e 5e 1e ../}.>^.
d2 05 90 70 7f 81 63 7e ...p..c~
c1 59 b7 33 59 a9 e9 fd .Y.3Y...
b0 fb ff 7c 1e 16 1c c5 ...|....
9e d6 5c 21 b4 56 a6 78 ..\!.V.x
1e a3 a4 88 a4 aa 5c b2 ......\.
0a c7 fe d1 41 f6 9d a5 ....A...
67 e8 e2 6d 75 b4 72 4f g..mu.rO
c4 40 69 a0 eb 4f 22 .@i..O"
--> SSL/TLS Record
Record Content Type : Handshake
Record Length : 78
Protocol Version : DTLSv1
Epoch : 0
Record Seq. Number : 4
Handshake Msg Type : Certificate Request
Message Length : 66
Message Sequence : 3
Fragment Offset : 0
Fragment Length : 66
-->SSL/TLS Certificate Request
Certificate Types : rsa_sign
Total Length : 62
CA Name Len : 60
CA Name : SEQUENCE (len = 58)
SET (len = 11)
SEQUENCE (len = 9)
OBJECT-ID (len = 3): id-at-countryName
PRINTABLE-STRING (len = 2): DE
SET (len = 23)
SEQUENCE (len = 21)
OBJECT-ID (len = 3): id-at-organizationName
PRINTABLE-STRING (len = 14): LANCOM SYSTEMS
SET (len = 18)
SEQUENCE (len = 16)
OBJECT-ID (len = 3): id-at-commonName
PRINTABLE-STRING (len = 9): LANCOM CA
--> SSL/TLS Record
Record Content Type : Handshake
Record Length : 12
Protocol Version : DTLSv1
Epoch : 0
Record Seq. Number : 5
Handshake Msg Type : Hello Done
Message Length : 0
Message Sequence : 4
Fragment Offset : 0
Fragment Length : 0
Message Body :
-> processing record with hdr at offset 144
-> record type handshake, handing to handshake reassembly
-> received 558 bytes of handshake msg data for reassembly
-> processing handshake message fragment
-> handshake message seq 1, total length 1889, fragment of 546 bytes at offset 1343
-> first fragment of handshake message
-> processing record with hdr at offset 715
-> record type handshake, handing to handshake reassembly
-> received 339 bytes of handshake msg data for reassembly
-> processing handshake message fragment
-> handshake message seq 2, total length 327, fragment of 327 bytes at offset 0
-> first fragment of handshake message
-> processing record with hdr at offset 1067
-> record type handshake, handing to handshake reassembly
-> received 78 bytes of handshake msg data for reassembly
-> processing handshake message fragment
-> handshake message seq 3, total length 66, fragment of 66 bytes at offset 0
-> first fragment of handshake message
-> processing record with hdr at offset 1158
-> record type handshake, handing to handshake reassembly
-> received 12 bytes of handshake msg data for reassembly
-> processing handshake message fragment
-> handshake message seq 4, total length 0, fragment of 0 bytes at offset 0
-> first fragment of handshake message
[DTLS] 2014/12/16 17:15:39,960 Devicetime: 2014/12/16 17:15:40,042
Received Data via connection reference 196, initial offset is 144
--> SSL/TLS Record
Record Content Type : Handshake
Record Length : 63
Protocol Version : DTLSv1
Epoch : 0
Record Seq. Number : 6
Handshake Msg Type : Server Hello
Message Length : 51
Message Sequence : 0
Fragment Offset : 0
Fragment Length : 51
-->SSL/TLS Server Hello
Protocol Version : DTLSv1
Server Random : 54 90 5a a7 79 d2 3e 57 T.Z.y.>W
f9 7e aa ef b0 61 73 a2 .~...as.
e5 7b f9 00 2b 10 71 22 .{..+.q"
2d 65 dc 5f 67 65 fd 40 -e._ge.@
Cipher Suite : TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
Compression Method : NULL
Reneg. Info :
EC-Point Formats : uncompressed
-> processing record with hdr at offset 144
-> record type handshake, handing to handshake reassembly
-> received 63 bytes of handshake msg data for reassembly
-> processing handshake message fragment
-> handshake message seq 0, total length 51, fragment of 51 bytes at offset 0
-> message seq(0) < current rx seq(1), ignoring fragment and scheduling retransmission
[DTLS] 2014/12/16 17:15:39,960 Devicetime: 2014/12/16 17:15:40,045
Received Data via connection reference 196, initial offset is 144
--> SSL/TLS Record
Record Content Type : Handshake
Record Length : 558
Protocol Version : DTLSv1
Epoch : 0
Record Seq. Number : 8
Handshake Msg Type : Certificate
Message Length : 1889
Message Sequence : 1
Fragment Offset : 1343
Fragment Length : 546
-->SSL/TLS Certificate(s)
Message Fragment : 01 31 c4 e0 6d 22 f7 9d .1..m"..
ee c9 ab 7c 36 c7 a3 9a ...|6...
fa ff 17 70 c6 65 91 50 ...p.e.P
4d 76 eb b8 92 e6 50 b8 Mv....P.
5f a8 6e 63 02 28 a4 d1 _.nc.(..
93 f0 51 81 72 cf b7 97 ..Q.r...
04 15 01 38 8d f2 e0 87 ...8....
3e e4 ed 46 90 5c ce df >..F.\..
82 61 db db 6f 40 82 de .a..o@..
bd 23 51 e3 6a 99 d4 27 .#Q.j..'
45 73 25 54 8b 35 6c 1d Es%T.5l.
cb 17 02 03 01 00 01 a3 ........
81 ac 30 81 a9 30 12 06 ..0..0..
03 55 1d 13 01 01 ff 04 .U......
08 30 06 01 01 ff 02 01 .0......
00 30 0e 06 03 55 1d 0f .0...U..
01 01 ff 04 04 03 02 01 ........
c6 30 1d 06 03 55 1d 0e .0...U..
04 16 04 14 be 97 66 46 ......fF
92 70 64 04 07 04 49 8e .pd...I.
cc 7b fd f2 57 42 84 be .{..WB..
30 64 06 03 55 1d 23 04 0d..U.#.
5d 30 5b 80 14 be 97 66 ]0[....f
46 92 70 64 04 07 04 49 F.pd...I
8e cc 7b fd f2 57 42 84 ..{..WB.
be a1 3e a4 3c 30 3a 31 ..>.<0:1
0b 30 09 06 03 55 04 06 .0...U..
13 02 44 45 31 17 30 15 ..DE1.0.
06 03 55 04 0a 13 0e 4c ..U....L
41 4e 43 4f 4d 20 53 59 ANCOM SY
53 54 45 4d 53 31 12 30 STEMS1.0
10 06 03 55 04 03 13 09 ...U....
4c 41 4e 43 4f 4d 20 43 LANCOM C
41 82 03 10 93 e6 30 0d A.....0.
06 09 2a 86 48 86 f7 0d ..*.H...
01 01 04 05 00 03 82 01 ........
01 00 47 a5 61 73 e0 7d ..G.as.}
4d 71 73 b7 84 c5 b0 83 Mqs.....
64 2b 14 6f 51 4e c5 56 d+.oQN.V
2f 4f 2e 6d be 45 49 83 /O.m.EI.
27 8b 0a 75 e5 bb 69 3a '..u..i:
47 66 92 90 1b 4c dc f1 Gf...L..
6a 0d 8e 8d 1f 81 10 6f j......o
06 6f b9 5a b0 ca 0e 0b .o.Z....
5e 56 fd 3b f0 f7 f3 9a ^V.;....
15 47 f1 88 a0 0a 82 7c .G.....|
24 6f cf e3 ba 08 ef 7f $o......
4c ca 2f 25 e4 22 d7 c4 L./%."..
3d 92 d4 d5 02 ec 06 6b =......k
73 1d 0b a6 1e 33 fd 54 s....3.T
75 55 91 dd af 12 a4 04 uU......
1d 71 47 42 ae bd 27 2d .qGB..'-
75 c9 b2 42 14 4a a9 35 u..B.J.5
12 42 6f 96 d3 44 8e e7 .Bo..D..
8f 72 d3 b3 87 57 5f 74 .r...W_t
a7 84 72 48 96 63 b3 65 ..rH.c.e
16 c6 ce b5 17 74 fa 54 .....t.T
c1 5f e6 80 1d d8 0e e6 ._......
e0 e6 00 20 0d ae 53 4f ... ..SO
c1 bd 8d c6 01 de 83 9d ........
be 93 a8 c7 e7 d7 7b e5 ......{.
72 fd 23 b0 00 b4 c3 1e r.#.....
65 da 1b 49 e9 78 1b 7f e..I.x..
47 4d d9 3c e0 13 e0 05 GM.<....
74 87 f0 6e 41 ca 81 86 t..nA...
68 fa 1d d2 69 3b 5f a8 h...i;_.
bc f4 c0 b6 4e b1 fd 61 ....N..a
2d a3 f0 dd c3 24 a6 37 -....$.7
4a 51 JQ
--> SSL/TLS Record
Record Content Type : Handshake
Record Length : 339
Protocol Version : DTLSv1
Epoch : 0
Record Seq. Number : 9
Handshake Msg Type : Server KeyExchange
Message Length : 327
Message Sequence : 2
Fragment Offset : 0
Fragment Length : 327
Message Body : 03 00 17 41 04 0c 6f 66 ...A..of
f7 cd 42 03 bc 80 f2 ba ..B.....
f9 ad 5f 2f 67 7d 69 76 .._/g}iv
5d 79 22 e7 5a 25 16 c6 ]y".Z%..
45 5a b0 e2 c3 71 8b 4e EZ...q.N
06 47 ac 57 9d 39 36 8b .G.W.96.
62 ed ab a3 30 c5 52 f9 b...0.R.
ff 57 11 1a 98 6c 34 3c .W...l4<
b1 b0 98 78 84 01 00 02 ...x....
95 80 1a 25 c9 31 da d4 ...%.1..
42 e1 3a df c9 b6 26 4e B.:...&N
a6 e6 6e 74 c6 93 a8 fd ..nt....
b5 c9 18 e3 e5 42 f6 69 .....B.i
ac 3a 6c 02 50 35 c6 f7 .:l.P5..
8a 62 e3 9a 46 e0 6c 63 .b..F.lc
10 ca 10 6f 02 26 39 b7 ...o.&9.
cb 25 da 63 8a 26 ba eb .%.c.&..
d8 98 3c 8e 52 7f 69 59 ..<.R.iY
15 53 90 37 82 bf ea fa .S.7....
70 70 95 77 a4 6e ef fa pp.w.n..
55 97 5a 1b 64 3f d9 f0 U.Z.d?..
62 57 41 00 c6 f7 ee 23 bWA....#
fb 56 b3 41 4e 05 73 fd .V.AN.s.
47 49 94 fc 01 6a 21 e4 GI...j!.
99 48 af bc 7f 63 e1 b3 .H...c..
dc dc c2 44 3f 30 d3 b0 ...D?0..
f5 69 05 e0 5e 95 cb 34 .i..^..4
33 2a a9 f5 30 17 bc 91 3*..0...
b1 dd bc 2e 95 56 84 3c .....V.<
49 4c 5c 89 e2 a1 e3 1a IL\.....
85 5e 76 cc 81 8f 47 af .^v...G.
e6 2e a3 3d 5a 5a 47 98 ...=ZZG.
02 f7 2f 7d 89 3e 5e 1e ../}.>^.
d2 05 90 70 7f 81 63 7e ...p..c~
c1 59 b7 33 59 a9 e9 fd .Y.3Y...
b0 fb ff 7c 1e 16 1c c5 ...|....
9e d6 5c 21 b4 56 a6 78 ..\!.V.x
1e a3 a4 88 a4 aa 5c b2 ......\.
0a c7 fe d1 41 f6 9d a5 ....A...
67 e8 e2 6d 75 b4 72 4f g..mu.rO
c4 40 69 a0 eb 4f 22 .@i..O"
--> SSL/TLS Record
Record Content Type : Handshake
Record Length : 78
Protocol Version : DTLSv1
Epoch : 0
Record Seq. Number : 10
Handshake Msg Type : Certificate Request
Message Length : 66
Message Sequence : 3
Fragment Offset : 0
Fragment Length : 66
-->SSL/TLS Certificate Request
Certificate Types : rsa_sign
Total Length : 62
CA Name Len : 60
CA Name : SEQUENCE (len = 58)
SET (len = 11)
SEQUENCE (len = 9)
OBJECT-ID (len = 3): id-at-countryName
PRINTABLE-STRING (len = 2): DE
SET (len = 23)
SEQUENCE (len = 21)
OBJECT-ID (len = 3): id-at-organizationName
PRINTABLE-STRING (len = 14): LANCOM SYSTEMS
SET (len = 18)
SEQUENCE (len = 16)
OBJECT-ID (len = 3): id-at-commonName
PRINTABLE-STRING (len = 9): LANCOM CA
--> SSL/TLS Record
Record Content Type : Handshake
Record Length : 12
Protocol Version : DTLSv1
Epoch : 0
Record Seq. Number : 11
Handshake Msg Type : Hello Done
Message Length : 0
Message Sequence : 4
Fragment Offset : 0
Fragment Length : 0
Message Body :
-> processing record with hdr at offset 144
-> record type handshake, handing to handshake reassembly
-> received 558 bytes of handshake msg data for reassembly
-> processing handshake message fragment
-> handshake message seq 1, total length 1889, fragment of 546 bytes at offset 1343
-> additional fragment of known handshake message
-> processing record with hdr at offset 715
-> record type handshake, handing to handshake reassembly
-> received 339 bytes of handshake msg data for reassembly
-> processing handshake message fragment
-> handshake message seq 2, total length 327, fragment of 327 bytes at offset 0
-> additional fragment of known handshake message
-> processing record with hdr at offset 1067
-> record type handshake, handing to handshake reassembly
-> received 78 bytes of handshake msg data for reassembly
-> processing handshake message fragment
-> handshake message seq 3, total length 66, fragment of 66 bytes at offset 0
-> additional fragment of known handshake message
-> processing record with hdr at offset 1158
-> record type handshake, handing to handshake reassembly
-> received 12 bytes of handshake msg data for reassembly
-> processing handshake message fragment
-> handshake message seq 4, total length 0, fragment of 0 bytes at offset 0
-> first fragment of handshake message
[DTLS] 2014/12/16 17:15:40,382 Devicetime: 2014/12/16 17:15:40,440
Retransmit due to retry on other side for connection reference 196
-> retransmitting fragments
Send packet(s) via connection reference 196 (1 fragments to send)
--> SSL/TLS Record
Record Content Type : Handshake
Record Length : 95
Protocol Version : DTLSv1
Epoch : 0
Record Seq. Number : 1
Handshake Msg Type : Client Hello
Message Length : 83
Message Sequence : 0
Fragment Offset : 0
Fragment Length : 83
-->SSL/TLS Client Hello
Protocol Version : DTLSv1
Client Random : 54 90 5a a7 a1 cf 2e 9e T.Z.....
b8 09 d8 13 06 a2 00 f3 ........
b9 ee 8c 80 6f 38 44 28 ....o8D(
b3 61 5b 84 44 9a e0 30 .a[.D..0
Cipher Suites : TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
TLS_DHE_RSA_WITH_AES_256_CBC_SHA
TLS_RSA_WITH_AES_256_CBC_SHA
TLS_DHE_RSA_WITH_AES_128_CBC_SHA
TLS_RSA_WITH_AES_128_CBC_SHA
TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
TLS_RSA_WITH_3DES_EDE_CBC_SHA
Compression Methods : NULL
Reneg. Info :
Elliptic Curves : secp256r1
secp384r1
secp521r1
EC-Point Formats : uncompressed
[DTLS] 2014/12/16 17:15:40,788 Devicetime: 2014/12/16 17:15:40,872
Received Data via connection reference 196, initial offset is 144
--> SSL/TLS Record
Record Content Type : Handshake
Record Length : 63
Protocol Version : DTLSv1
Epoch : 0
Record Seq. Number : 12
Handshake Msg Type : Server Hello
Message Length : 51
Message Sequence : 0
Fragment Offset : 0
Fragment Length : 51
-->SSL/TLS Server Hello
Protocol Version : DTLSv1
Server Random : 54 90 5a a7 79 d2 3e 57 T.Z.y.>W
f9 7e aa ef b0 61 73 a2 .~...as.
e5 7b f9 00 2b 10 71 22 .{..+.q"
2d 65 dc 5f 67 65 fd 40 -e._ge.@
Cipher Suite : TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
Compression Method : NULL
Reneg. Info :
EC-Point Formats : uncompressed
-> processing record with hdr at offset 144
-> record type handshake, handing to handshake reassembly
-> received 63 bytes of handshake msg data for reassembly
-> processing handshake message fragment
-> handshake message seq 0, total length 51, fragment of 51 bytes at offset 0
-> message seq(0) < current rx seq(1), ignoring fragment and scheduling retransmission
[DTLS] 2014/12/16 17:15:40,788 Devicetime: 2014/12/16 17:15:40,875
Received Data via connection reference 196, initial offset is 144
--> SSL/TLS Record
Record Content Type : Handshake
Record Length : 558
Protocol Version : DTLSv1
Epoch : 0
Record Seq. Number : 14
Handshake Msg Type : Certificate
Message Length : 1889
Message Sequence : 1
Fragment Offset : 1343
Fragment Length : 546
-->SSL/TLS Certificate(s)
Message Fragment : 01 31 c4 e0 6d 22 f7 9d .1..m"..
ee c9 ab 7c 36 c7 a3 9a ...|6...
fa ff 17 70 c6 65 91 50 ...p.e.P
4d 76 eb b8 92 e6 50 b8 Mv....P.
5f a8 6e 63 02 28 a4 d1 _.nc.(..
93 f0 51 81 72 cf b7 97 ..Q.r...
04 15 01 38 8d f2 e0 87 ...8....
3e e4 ed 46 90 5c ce df >..F.\..
82 61 db db 6f 40 82 de .a..o@..
bd 23 51 e3 6a 99 d4 27 .#Q.j..'
45 73 25 54 8b 35 6c 1d Es%T.5l.
cb 17 02 03 01 00 01 a3 ........
81 ac 30 81 a9 30 12 06 ..0..0..
03 55 1d 13 01 01 ff 04 .U......
08 30 06 01 01 ff 02 01 .0......
00 30 0e 06 03 55 1d 0f .0...U..
01 01 ff 04 04 03 02 01 ........
c6 30 1d 06 03 55 1d 0e .0...U..
04 16 04 14 be 97 66 46 ......fF
92 70 64 04 07 04 49 8e .pd...I.
cc 7b fd f2 57 42 84 be .{..WB..
30 64 06 03 55 1d 23 04 0d..U.#.
5d 30 5b 80 14 be 97 66 ]0[....f
46 92 70 64 04 07 04 49 F.pd...I
8e cc 7b fd f2 57 42 84 ..{..WB.
be a1 3e a4 3c 30 3a 31 ..>.<0:1
0b 30 09 06 03 55 04 06 .0...U..
13 02 44 45 31 17 30 15 ..DE1.0.
06 03 55 04 0a 13 0e 4c ..U....L
41 4e 43 4f 4d 20 53 59 ANCOM SY
53 54 45 4d 53 31 12 30 STEMS1.0
10 06 03 55 04 03 13 09 ...U....
4c 41 4e 43 4f 4d 20 43 LANCOM C
41 82 03 10 93 e6 30 0d A.....0.
06 09 2a 86 48 86 f7 0d ..*.H...
01 01 04 05 00 03 82 01 ........
01 00 47 a5 61 73 e0 7d ..G.as.}
4d 71 73 b7 84 c5 b0 83 Mqs.....
64 2b 14 6f 51 4e c5 56 d+.oQN.V
2f 4f 2e 6d be 45 49 83 /O.m.EI.
27 8b 0a 75 e5 bb 69 3a '..u..i:
47 66 92 90 1b 4c dc f1 Gf...L..
6a 0d 8e 8d 1f 81 10 6f j......o
06 6f b9 5a b0 ca 0e 0b .o.Z....
5e 56 fd 3b f0 f7 f3 9a ^V.;....
15 47 f1 88 a0 0a 82 7c .G.....|
24 6f cf e3 ba 08 ef 7f $o......
4c ca 2f 25 e4 22 d7 c4 L./%."..
3d 92 d4 d5 02 ec 06 6b =......k
73 1d 0b a6 1e 33 fd 54 s....3.T
75 55 91 dd af 12 a4 04 uU......
1d 71 47 42 ae bd 27 2d .qGB..'-
75 c9 b2 42 14 4a a9 35 u..B.J.5
12 42 6f 96 d3 44 8e e7 .Bo..D..
8f 72 d3 b3 87 57 5f 74 .r...W_t
a7 84 72 48 96 63 b3 65 ..rH.c.e
16 c6 ce b5 17 74 fa 54 .....t.T
c1 5f e6 80 1d d8 0e e6 ._......
e0 e6 00 20 0d ae 53 4f ... ..SO
c1 bd 8d c6 01 de 83 9d ........
be 93 a8 c7 e7 d7 7b e5 ......{.
72 fd 23 b0 00 b4 c3 1e r.#.....
65 da 1b 49 e9 78 1b 7f e..I.x..
47 4d d9 3c e0 13 e0 05 GM.<....
74 87 f0 6e 41 ca 81 86 t..nA...
68 fa 1d d2 69 3b 5f a8 h...i;_.
bc f4 c0 b6 4e b1 fd 61 ....N..a
2d a3 f0 dd c3 24 a6 37 -....$.7
4a 51 JQ
--> SSL/TLS Record
Record Content Type : Handshake
Record Length : 339
Protocol Version : DTLSv1
Epoch : 0
Record Seq. Number : 15
Handshake Msg Type : Server KeyExchange
Message Length : 327
Message Sequence : 2
Fragment Offset : 0
Fragment Length : 327
Message Body : 03 00 17 41 04 0c 6f 66 ...A..of
f7 cd 42 03 bc 80 f2 ba ..B.....
f9 ad 5f 2f 67 7d 69 76 .._/g}iv
5d 79 22 e7 5a 25 16 c6 ]y".Z%..
45 5a b0 e2 c3 71 8b 4e EZ...q.N
06 47 ac 57 9d 39 36 8b .G.W.96.
62 ed ab a3 30 c5 52 f9 b...0.R.
ff 57 11 1a 98 6c 34 3c .W...l4<
b1 b0 98 78 84 01 00 02 ...x....
95 80 1a 25 c9 31 da d4 ...%.1..
42 e1 3a df c9 b6 26 4e B.:...&N
a6 e6 6e 74 c6 93 a8 fd ..nt....
b5 c9 18 e3 e5 42 f6 69 .....B.i
ac 3a 6c 02 50 35 c6 f7 .:l.P5..
8a 62 e3 9a 46 e0 6c 63 .b..F.lc
10 ca 10 6f 02 26 39 b7 ...o.&9.
cb 25 da 63 8a 26 ba eb .%.c.&..
d8 98 3c 8e 52 7f 69 59 ..<.R.iY
15 53 90 37 82 bf ea fa .S.7....
70 70 95 77 a4 6e ef fa pp.w.n..
55 97 5a 1b 64 3f d9 f0 U.Z.d?..
62 57 41 00 c6 f7 ee 23 bWA....#
fb 56 b3 41 4e 05 73 fd .V.AN.s.
47 49 94 fc 01 6a 21 e4 GI...j!.
99 48 af bc 7f 63 e1 b3 .H...c..
dc dc c2 44 3f 30 d3 b0 ...D?0..
f5 69 05 e0 5e 95 cb 34 .i..^..4
33 2a a9 f5 30 17 bc 91 3*..0...
b1 dd bc 2e 95 56 84 3c .....V.<
49 4c 5c 89 e2 a1 e3 1a IL\.....
85 5e 76 cc 81 8f 47 af .^v...G.
e6 2e a3 3d 5a 5a 47 98 ...=ZZG.
02 f7 2f 7d 89 3e 5e 1e ../}.>^.
d2 05 90 70 7f 81 63 7e ...p..c~
c1 59 b7 33 59 a9 e9 fd .Y.3Y...
b0 fb ff 7c 1e 16 1c c5 ...|....
9e d6 5c 21 b4 56 a6 78 ..\!.V.x
1e a3 a4 88 a4 aa 5c b2 ......\.
0a c7 fe d1 41 f6 9d a5 ....A...
67 e8 e2 6d 75 b4 72 4f g..mu.rO
c4 40 69 a0 eb 4f 22 .@i..O"
--> SSL/TLS Record
Record Content Type : Handshake
Record Length : 78
Protocol Version : DTLSv1
Epoch : 0
Record Seq. Number : 16
Handshake Msg Type : Certificate Request
Message Length : 66
Message Sequence : 3
Fragment Offset : 0
Fragment Length : 66
-->SSL/TLS Certificate Request
Certificate Types : rsa_sign
Total Length : 62
CA Name Len : 60
CA Name : SEQUENCE (len = 58)
SET (len = 11)
SEQUENCE (len = 9)
OBJECT-ID (len = 3): id-at-countryName
PRINTABLE-STRING (len = 2): DE
SET (len = 23)
SEQUENCE (len = 21)
OBJECT-ID (len = 3): id-at-organizationName
PRINTABLE-STRING (len = 14): LANCOM SYSTEMS
SET (len = 18)
SEQUENCE (len = 16)
OBJECT-ID (len = 3): id-at-commonName
PRINTABLE-STRING (len = 9): LANCOM CA
--> SSL/TLS Record
Record Content Type : Handshake
Record Length : 12
Protocol Version : DTLSv1
Epoch : 0
Record Seq. Number : 17
Handshake Msg Type : Hello Done
Message Length : 0
Message Sequence : 4
Fragment Offset : 0
Fragment Length : 0
Message Body :
-> processing record with hdr at offset 144
-> record type handshake, handing to handshake reassembly
-> received 558 bytes of handshake msg data for reassembly
-> processing handshake message fragment
-> handshake message seq 1, total length 1889, fragment of 546 bytes at offset 1343
-> additional fragment of known handshake message
-> processing record with hdr at offset 715
-> record type handshake, handing to handshake reassembly
-> received 339 bytes of handshake msg data for reassembly
-> processing handshake message fragment
-> handshake message seq 2, total length 327, fragment of 327 bytes at offset 0
-> additional fragment of known handshake message
-> processing record with hdr at offset 1067
-> record type handshake, handing to handshake reassembly
-> received 78 bytes of handshake msg data for reassembly
-> processing handshake message fragment
-> handshake message seq 3, total length 66, fragment of 66 bytes at offset 0
-> additional fragment of known handshake message
-> processing record with hdr at offset 1158
-> record type handshake, handing to handshake reassembly
-> received 12 bytes of handshake msg data for reassembly
-> processing handshake message fragment
-> handshake message seq 4, total length 0, fragment of 0 bytes at offset 0
-> first fragment of handshake message
[TraceStopped] 2014/12/16 17:15:41,023
Used config:
# Trace config
trace + DTLS
Ich hoffe damit kann jemand etwas anfangen?!
Da auf dem WLC derzeit 28 aktive APs verbunden sind, kann ich leider keinen DTLS-Trace vom WLC liefern. Die Anzahl der Einträge sprengt die Lesbarkeit.
Grüße,
Norman.
