June 1997
Intermediate to advanced
506 pages
14h 29m
English
Content preview from Web Security and Commerce
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
SSL 3.0 Protocols
SSL protocols are specific types of messages that are sent using the record layer. SSL v3.0 defines three protocols:
Alert protocol
ChangeCipherSpec protocol
Handshake protocol
The SSL record layer can also be used to send user data.
Alert Protocol
Alerts are a specific type of message that can be transmitted by the SSL record layer. Alerts consist of two parts: an AlertLevel and an AlertDescription. Both are coded as single 8-bit numbers.
SSL alerts are encrypted and compressed.
The SSL v3.0 specification defines two alert levels:
|
Alert Level |
Level Name |
Meaning |
|---|---|---|
|
1 |
Warning |
SSL warnings indicate a problem that is not fatal. |
|
2 |
Fatal |
SSL fatal alerts immediately terminate the current SSL session. |
SSL v3.0 defines 13 alert descriptions:
|
Alert Number |
Alert Name |
Meaning |
|---|---|---|
|
0 |
close_notify |
Indicates that the sender will not send any more information. If a close_notify is sent with a warning alert level, the session may be resumed. If a close_notify is sent with a fatal alert level, the session may not be resumed. |
|
10 |
unexpected_message |
Inappropriate message was received. This alert should never occur; it indicates an error in one of the SSL implementations participating in the conversation. |
|
20 |
bad_record_mac |
Sender received a record with an incorrect MAC. Fatal. |
|
30 |
decompression_failure |
Information in the record would not properly decompress. Fatal. |
|
40 |
handshake_failure |
Indicates that the sender was unable to negotiate an acceptable set of security parameters—for ... |
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.