Handshake message split across multiple records

[Abhinav Gandhi]

Hi all,

I am trying to test a case where the handshake message is fragmented across
two or more records. One way I was thinking was to create a very big
certificate and try. But, is there any option in openssl command line tool
for that? may be something which can set the MAX SSL record size?

Also, In fragmentation of handshake message scenario, how does the
remaining part of the message is sent? does the remaining handshake
message comes as it is or it comes with headers?

can someone please provide some pointers?

Thanks,
Abhinav

[ankur dwivedi]

You can write a script/program which sends the fragmented message. Not
only the certificate message but you can fragment any handshake
messages, like client hello, server hello and others. For an example
while fragmenting client hello you can send the first 5 bytes first,
then the remaining x bytes next which can also be fragmented itself.

Header will be sent only for the first fragment. In the remaining
fragments, header should not be there.

Post by Abhinav Gandhi
Hi all,
I am trying to test a case where the handshake message is fragmented across
two or more records. One way I was thinking was to create a very big
certificate and try. But, is there any option in openssl command line tool
for that? may be something which can set the MAX SSL record size?
Also, In fragmentation of handshake message scenario, how does the remaining
part of the message is sent? does the remaining handshake message comes as
it is or it comes with headers?
can someone please provide some pointers?
Thanks,
Abhinav