Client Hello sent to the server
Secure Sockets Layer
TLSv1.3 Record Layer: Handshake Protocol: Client Hello
Content Type: Handshake (22)
* it says 1.2 as this is the minimum level
Version: TLS 1.2 (0x0303)
Length: 299
Handshake Protocol: Client Hello
Handshake Type: Client Hello (1)
Length: 295
Version: TLS 1.2 (0x0303)
Random: 20eedbdaf7844aa681d073b0e6fa2b8cbe284d39c700a22a...
Session ID Length: 32
Session ID: 513f01bdc6f6de827221c7cf5355f91ecc222f6d5fe882df...
Cipher Suites Length: 36
Cipher Suites (18 suites)
* The list of supported cupher specs
Cipher Suite: TLS_EMPTY_RENEGOTIATION_INFO_SCSV (0x00ff)
* The first one is TLS 1.3
Cipher Suite: TLS_CHACHA20_POLY1305_SHA256 (0x1303)
* The rest are TLS 1.2
Cipher Suite: TLS_AES_256_GCM_SHA384 (0x1302)
...
Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027)
Compression Methods Length: 1
Compression Methods (1 method)
Extensions Length: 186
Extension: supported_versions (len=5)
Type: supported_versions (43)
Length: 5
Supported Versions length: 4
* Both TLS 1.3 and 1.2 are supported
Supported Version: TLS 1.3 (0x0304)
Supported Version: TLS 1.2 (0x0303)
Extension: key_share (len=38)
Type: key_share (51)
Length: 38
Key Share extension
Client Key Share Length: 36
Key Share Entry: Group: x25519, Key Exchange length: 32
Extension: supported_groups (len=12)
* The followin elliptic curve definitions
Type: supported_groups (10)
Length: 12
Supported Groups List Length: 10
Supported Groups (5 groups)
Supported Group: x25519 (0x001d)
Supported Group: secp256r1 (0x0017)
Supported Group: secp384r1 (0x0018)
Supported Group: secp521r1 (0x0019)
Supported Group: x448 (0x001e)
Extension: signature_algorithms (len=36)
* and these certicate types and other parameters
Type: signature_algorithms (13)
Length: 36
Signature Hash Algorithms Length: 34
Signature Hash Algorithms (17 algorithms)
Signature Algorithm: rsa_pkcs1_sha256 (0x0401)
Signature Algorithm: rsa_pkcs1_sha384 (0x0501)
Signature Algorithm: rsa_pkcs1_sha512 (0x0601)
Signature Algorithm: ecdsa_secp256r1_sha256 (0x0403)
Extension: signature_algorithms_cert (len=36)
Type: signature_algorithms_cert (50)
Length: 36
Signature Hash Algorithms Length: 34
Signature Hash Algorithms (17 algorithms)
Signature Algorithm: rsa_pkcs1_sha256 (0x0401)
...
* ECDA key exchange with elliptic curve of this type and sha 256 signature
Signature Algorithm: ecdsa_secp256r1_sha256 (0x0403)
...
Signature Algorithm: SHA224 ECDSA (0x0303)
Signature Algorithm: SHA1 DSA (0x0202)
Extension: ec_point_formats (len=2)
Type: ec_point_formats (11)
Length: 2
EC point formats Length: 1
Elliptic curves point formats (1)
EC point format: uncompressed (0)
Extension: server_name (len=29)
Type: server_name (0)
Length: 29
Server Name Indication extension
Server Name list length: 27
Server Name Type: host_name (0)
Server Name length: 24
* This is the name of the channe ECRSA1024
* a lower case channel name would be in hex
Server Name: ecrsa1024.chl.mq.ibm.com
Server hello from server to client
Secure Sockets Layer
TSv1.3 Record Layer: Handshake Protocol: Server Hello
Content Type: Handshake (22)
Version: TLS 1.2 (0x0303)
Length: 122
Handshake Protocol: Server Hello
Handshake Type: Server Hello (2)
Length: 118
Version: TLS 1.2 (0x0303)
Random: dbf0cd129b3cf8185a81ebd7738de2302c252ff6cf0af056...
Session ID Length: 32
Session ID: 513f01bdc6f6de827221c7cf5355f91ecc222f6d5fe882df...
* This is the agreed Cipher Suite
Cipher Suite: TLS_CHACHA20_POLY1305_SHA256 (0x1303)
Compression Method: null (0)
Extensions Length: 46
Extension: supported_versions (len=2)
Type: supported_versions (43)
Length: 2
* This only supports TLS 1.3
Supported Version: TLS 1.3 (0x0304)
Extension: key_share (len=36)
Type: key_share (51)
Length: 36
Key Share extension...
Flow after this, such as the server sending down its certificate, and requesting the client certificate are encypted and not visible in the packets.
ColinPaice 