Skip to main content


Eclipse Community Forums
Forum Search:

Search      Help    Register    Login    Home
Home » Eclipse Projects » Eclipse Titan » How to activate SSL debug mode using Abstract_Socket(TITAN OpenSSL Abstract_Socket)
How to activate SSL debug mode using Abstract_Socket [message #1843725] Mon, 16 August 2021 07:08 Go to next message
Yann Garcia is currently offline Yann GarciaFriend
Messages: 145
Registered: June 2016
Senior Member
Hello,

I'm using Abstract_Socket class to implement TLSv1.3 connection over TCP. I would like to get more verbose traces from SSL library in order to debug my connection failures (SSL_accept failure).
Do you know any function from openssl API to do it because I didn't find this functionality in openssl v1.1.1g documentation?

Many thanks in advance,

\BR
Yann
Re: How to activate SSL debug mode using Abstract_Socket [message #1843728 is a reply to message #1843725] Mon, 16 August 2021 09:05 Go to previous messageGo to next message
Gábor Szalai is currently offline Gábor SzalaiFriend
Messages: 134
Registered: December 2015
Senior Member
If the socket debugging is enabled by the test port parameter and the DBUG flag is added to the FileMask, the detailed openssl error are logged.

See the ERR_get_error() openssl functions.
Re: How to activate SSL debug mode using Abstract_Socket [message #1843732 is a reply to message #1843728] Mon, 16 August 2021 09:40 Go to previous messageGo to next message
Yann Garcia is currently offline Yann GarciaFriend
Messages: 145
Registered: June 2016
Senior Member
Hello Gábor,

Thanks a lot

Yann
Re: How to activate SSL debug mode using Abstract_Socket [message #1843776 is a reply to message #1843725] Tue, 17 August 2021 15:29 Go to previous messageGo to next message
Olaf Bergengruen is currently offline Olaf BergengruenFriend
Messages: 127
Registered: November 2018
Senior Member
Hi Gábor and Yann,

Attached a minor patch to Abstract_Socket which allows to enable/disable TLSv1.3 from the configuration file.
If useful, it may be integrated into the repositoy.
The changes are marked with "@@@".

Regards,
Olaf
Re: How to activate SSL debug mode using Abstract_Socket [message #1843898 is a reply to message #1843776] Mon, 23 August 2021 15:12 Go to previous messageGo to next message
Adam Knapp is currently offline Adam KnappFriend
Messages: 54
Registered: November 2020
Member
Hi Olaf,

Thank you for the contribution! It seems fine.
Could you please submit your modification as a merge request as it is more clear and transparent. To do that you need to:
1. fork from the original repo (https://gitlab.eclipse.org/eclipse/titan/titan.TestPorts.Common_Components.Abstract_Socket)
2. commit your modification in the forked repo
3. create a merge request (usually the gitlab website automatically proposes it after a commit)

Thank you!

p.s. we will update the documentation accordingly.
Re: How to activate SSL debug mode using Abstract_Socket [message #1843910 is a reply to message #1843898] Tue, 24 August 2021 07:58 Go to previous messageGo to next message
Olaf Bergengruen is currently offline Olaf BergengruenFriend
Messages: 127
Registered: November 2018
Senior Member
Done following your instructions.
Not sure whether the merge request is ok, since is the first time I did it.
Olaf
Re: How to activate SSL debug mode using Abstract_Socket [message #1843911 is a reply to message #1843910] Tue, 24 August 2021 08:08 Go to previous messageGo to next message
Adam Knapp is currently offline Adam KnappFriend
Messages: 54
Registered: November 2020
Member
It is perfect! :) Thanks a lot!
Re: How to activate SSL debug mode using Abstract_Socket [message #1843917 is a reply to message #1843911] Tue, 24 August 2021 12:16 Go to previous message
Olaf Bergengruen is currently offline Olaf BergengruenFriend
Messages: 127
Registered: November 2018
Senior Member
Wow, thanks, it was my first contribution :-)
Previous Topic:Communicate Rise V2G with raspberry pi
Next Topic:Eclipse Titan 8.0.0 release announcement
Goto Forum:
  


Current Time: Wed Oct 09 22:53:31 GMT 2024

Powered by FUDForum. Page generated in 0.04170 seconds
.:: Contact :: Home ::.

Powered by: FUDforum 3.0.2.
Copyright ©2001-2010 FUDforum Bulletin Board Software

Back to the top