Title: Description of Client Output Messages
Course: Introduction to SSL/PKI > Section: SSL/TLS

Description of Client Output Messages

Note: It is not important to know the gruesome details of the client/server handshake exchange. Instead the following it to give a general feel of what takes place during it.

Maximum Number of Certificates to Chain to Verify PKI Certificates

  verify depth is 4


Client/Server SSL Handshake Messages

  SSL_connect:before/connect initialization
  SSL_connect:SSLv2/v3 write client hello A
  SSL_connect:SSLv3 read server hello A
  depth=1 /O=ClassCA/CN=me
  verify return:1
  depth=0 /O=ClassCA/CN=MyServer
  verify return:1
  SSL_connect:SSLv3 read server certificate A
  SSL_connect:SSLv3 read server key exchange A
  SSL_connect:SSLv3 read server done A
  SSL_connect:SSLv3 write client key exchange A
  SSL_connect:SSLv3 write change cipher spec A
  SSL_connect:SSLv3 write finished A
  SSL_connect:SSLv3 flush data
  SSL_connect:SSLv3 read server session ticket A
  SSL_connect:SSLv3 read finished A


Server Certificate Chain

  Certificate chain
   0 s:/O=ClassCA/CN=MyServer
     i:/O=ClassCA/CN=me
  -----BEGIN CERTIFICATE-----
  MIICNTCCAZ6gAwIBAgIBBDANBgkqhkiG9w0BAQUFADAfMRAwDgYDVQQKEwdDbGFz
  c0NBMQswCQYDVQQDEwJtZTAeFw0xMTA4MDMxNDIwMDRaFw0xMjA4MDIxNDIwMDRa
  MCUxEDAOBgNVBAoTB0NsYXNzQ0ExETAPBgNVBAMTCE15U2VydmVyMIGfMA0GCSqG
  SIb3DQEBAQUAA4GNADCBiQKBgQDL94cp6yzExCQuw0/xgS8A1RVi8K3Tzo6NCjvs
  bUw/gNZ4OkALpqkxRf2kbWRfwB4bd/EtzZajh4TfNXypV39kMeIKqljTmPhkxsno
  imzCiq7ACTh2k5zDsFvmaVafzAvBuL8jjQJHIWi+sp4ltaQDWlGlF6VkpnnBqXFm
  xjbb1QIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCGSAGG+EIBDQQfFh1PcGVuU1NM
  IEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQU+Q7HMV4LSwyj0PNoTknh
  wCNPve8wHwYDVR0jBBgwFoAU41ZaNY4IwPYX8sveElMD4Q0QEAAwDQYJKoZIhvcN
  AQEFBQADgYEAu1cjAC9if3ZVJR6YTHFZ6ZV2kdD5cKjfJQ5lx/P/yQAOlc8Lawbo
  Zq7UvoMZyh6R2OMicJgUp+z9OtP7iWxosmMIF29xudbhuVK8Wvmy8hRKB52QPDti
  ypleTwOvEHFWeVBpey0cIDXesXT6KiXLsLh5kH0CoFwtHELUtZAL9kQ=
  -----END CERTIFICATE-----
   1 s:/O=ClassCA/CN=me
     i:/O=ClassCA/CN=me
  -----BEGIN CERTIFICATE-----
  MIICPTCCAaagAwIBAgIJAJDTHbM7vGlNMA0GCSqGSIb3DQEBBQUAMB8xEDAOBgNV
  BAoTB0NsYXNzQ0ExCzAJBgNVBAMTAm1lMB4XDTExMDcxMTE5MjExOVoXDTIxMDQw
  OTE5MjExOVowHzEQMA4GA1UEChMHQ2xhc3NDQTELMAkGA1UEAxMCbWUwgZ8wDQYJ
  KoZIhvcNAQEBBQADgY0AMIGJAoGBANzhRFky/qosIEEuaEjL7obz/SoFAy1eKut8
  9yU1X7KkDcZllSO8uOireXG8yscycEGSn1SDntWTGSMW0UIMpDIf34E6maAdVdwi
  T1nwVCleTRLI23oTCXAZHjVw0LmVO9RIVvARPQvEL3BdSbE91ogP0c92yP+C1ehT
  AN3KSQZ9AgMBAAGjgYAwfjAdBgNVHQ4EFgQU41ZaNY4IwPYX8sveElMD4Q0QEAAw
  TwYDVR0jBEgwRoAU41ZaNY4IwPYX8sveElMD4Q0QEAChI6QhMB8xEDAOBgNVBAoT
  B0NsYXNzQ0ExCzAJBgNVBAMTAm1lggkAkNMdszu8aU0wDAYDVR0TBAUwAwEB/zAN
  BgkqhkiG9w0BAQUFAAOBgQAwuClr/mBVQsPVqrkDsRqm/6/y0fhmCr4u1ICgsybc
  +UYWZPWsIQUfq/ceVL2vEr79DAPuc+aP80zbQBkzisabAA+VoI5WHVCc1B6cOSSu
  35h2ev7C8EEP1CPyQ5veNfGwPEoIbJC2WbdZmTg+taqatAdkE5S7w/DAFPt2yi7v
  pQ==
  -----END CERTIFICATE-----

  Server certificate
  subject=/O=ClassCA/CN=MyServer
  issuer=/O=ClassCA/CN=me


Client Did Not Send PKI Certificate to Server

  No client certificate CA names sent


Client/Server Session Configuration, Parameters, etc.

  SSL handshake has read 1739 bytes and written 229 bytes

  New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
  Server public key is 1024 bit
  Secure Renegotiation IS supported
  Compression: zlib compression
  Expansion: zlib compression
  SSL-Session:
      Protocol  : TLSv1
      Cipher    : DHE-RSA-AES256-SHA
      Session-ID: ACB32A36A2AD3105C550C8FD551058D148EC48DD
      5060E50228B2E85F939CA0F3
      Session-ID-ctx:
      Master-Key: 573C7EE18B119EC133BC03162332516CFF784322CFCD
      56DD455CF5C8C037EEAB52365D3C8F2857B8BF5351075F35D024
      Key-Arg   : None
      TLS session ticket:
      ..........................
      ..........................
      ........ omitted .........
      ..........................
      ..........................


SSL Connection Created and Ready to Exchange Messages