Skip to content

Include OpenSSL 3.5.0 in list of tested SULs #182

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 7 commits into
base: master
Choose a base branch
from
Open

Include OpenSSL 3.5.0 in list of tested SULs #182

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
a77c8dd
Include OpenSSL 3.5.0 in list of tested SULs and test its server
kostis Apr 18, 2025
acdb671
fix OpenSSL 3.5.0 DTLS 1.2 Learning problem & add more regression tes…
c-southwest May 6, 2025
4de8e09
WIP: Add a test for OpenSSL 3.5.0 clients to CI
kostis May 8, 2025
d430aad
Take out broken OpenSSL 3.0.0 from the list of SUTs to set up [skip ci]
kostis May 8, 2025
16f5a0e
fix OpenSSL 3.5 client: enable legacy renegotiation & update CI test
c-southwest May 8, 2025
c713225
add 2 more hypotheses & update CI test (add one more round)
c-southwest May 8, 2025
69d822e
Add option --legacy_renegotiation to all args/openssl files [skip ci]
kostis May 10, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
52 changes: 52 additions & 0 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -262,6 +262,58 @@ jobs:
java -jar target/dtls-fuzzer.jar args/openssl/learn_openssl_client_dhe_ecdhe_rsa_cert_reneg -Dopenssl.version=1.1.1k -roundLimit 5
experiments/scripts/diff_hyps.sh experiments/models/regression/clients/rounds/openssl-1.1.1k_client_dhe_ecdhe_rsa_cert_reneg output/openssl-1.1.1k_client_dhe_ecdhe_rsa_cert_reneg 5

OpenSSL-3-5-0_Server_all_cert_none:
if: ${{ !contains(github.event.head_commit.message, 'ci skip') }}
runs-on: ubuntu-latest
strategy:
fail-fast: true
steps:
- name: Checkout code
uses: actions/checkout@v4

- name: Set up JDK 17
uses: actions/setup-java@v4
with:
java-version: '17'
distribution: 'temurin'

- name: Install DTLS-Fuzzer
run: ./install.sh

- name: Setup SUT
run: ./setup_sut.sh openssl-3.5.0

- name: Test openssl-3.5.0 Server (all_cert_none)
run: |
java -jar target/dtls-fuzzer.jar args/openssl/learn_openssl_server_all_cert_none -Dopenssl.version=3.5.0 -roundLimit 9
experiments/scripts/diff_hyps.sh experiments/models/regression/servers/rounds/openssl-3.5.0_server_all_cert_none output/openssl-3.5.0_server_all_cert_none 9

OpenSSL-3-5-0_Client_ecdhe_cert_reneg:
if: ${{ !contains(github.event.head_commit.message, 'ci skip') }}
runs-on: ubuntu-latest
strategy:
fail-fast: true
steps:
- name: Checkout code
uses: actions/checkout@v4

- name: Set up JDK 17
uses: actions/setup-java@v4
with:
java-version: '17'
distribution: 'temurin'

- name: Install DTLS-Fuzzer
run: ./install.sh

- name: Setup SUT
run: ./setup_sut.sh openssl-3.5.0

- name: Test openssl-3.5.0 Client (ecdhe_cert_reneg)
run: |
java -jar target/dtls-fuzzer.jar args/openssl/learn_openssl_client_ecdhe_cert_reneg -Dopenssl.version=3.5.0 -roundLimit 8
experiments/scripts/diff_hyps.sh experiments/models/regression/clients/rounds/openssl-3.5.0_client_ecdhe_cert_reneg output/openssl-3.5.0_client_ecdhe_cert_reneg 8

PionDTLS-2-0-9_Server_psk:
if: ${{ !contains(github.event.head_commit.message, 'ci skip') }}
runs-on: ubuntu-24.04 # due to needing an old version of golang
Expand Down
2 changes: 1 addition & 1 deletion args/openssl/learn_openssl_client_dhe_ecdhe_rsa_cert
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ ${sul.port}
-responseWait
20
-cmd
${fuzzer.dir}/suts/openssl-${openssl.version}/apps/openssl s_client -psk 1234 -key ${keystore}/rsa2048_key.pem -cert ${keystore}/rsa2048_cert.pem -CAfile ${keystore}/rsa2048_cert.pem -port ${sul.port} -dtls1_2 -mtu 5000
${fuzzer.dir}/suts/openssl-${openssl.version}/apps/openssl s_client -legacy_renegotiation -psk 1234 -key ${keystore}/rsa2048_key.pem -cert ${keystore}/rsa2048_cert.pem -CAfile ${keystore}/rsa2048_cert.pem -port ${sul.port} -dtls1_2 -mtu 5000

# mapper config
-socketClosedAsTimeout
Expand Down
2 changes: 1 addition & 1 deletion args/openssl/learn_openssl_client_dhe_ecdhe_rsa_cert_reneg
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ ${sul.port}
-responseWait
20
-cmd
${fuzzer.dir}/suts/openssl-${openssl.version}/apps/openssl s_client -psk 1234 -key ${keystore}/rsa2048_key.pem -cert ${keystore}/rsa2048_cert.pem -CAfile ${keystore}/rsa2048_cert.pem -port ${sul.port} -dtls1_2 -mtu 5000
${fuzzer.dir}/suts/openssl-${openssl.version}/apps/openssl s_client -legacy_renegotiation -psk 1234 -key ${keystore}/rsa2048_key.pem -cert ${keystore}/rsa2048_cert.pem -CAfile ${keystore}/rsa2048_cert.pem -port ${sul.port} -dtls1_2 -mtu 5000

# mapper config
-socketClosedAsTimeout
Expand Down
2 changes: 1 addition & 1 deletion args/openssl/learn_openssl_client_ecdhe_cert_reneg
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ ${sul.port}
-responseWait
20
-cmd
${fuzzer.dir}/suts/openssl-${openssl.version}/apps/openssl s_client -psk 1234 -key ${keystore}/rsa2048_key.pem -cert ${keystore}/rsa2048_cert.pem -CAfile ${keystore}/rsa2048_cert.pem -port ${sul.port} -dtls1_2 -mtu 5000
${fuzzer.dir}/suts/openssl-${openssl.version}/apps/openssl s_client -legacy_renegotiation -psk 1234 -key ${keystore}/rsa2048_key.pem -cert ${keystore}/rsa2048_cert.pem -CAfile ${keystore}/rsa2048_cert.pem -port ${sul.port} -dtls1_2 -mtu 5000

# mapper config
-socketClosedAsTimeout
Expand Down
2 changes: 1 addition & 1 deletion args/openssl/learn_openssl_client_psk
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ ${sul.port}
-responseWait
20
-cmd
${fuzzer.dir}/suts/openssl-${openssl.version}/apps/openssl s_client -psk 1234 -key ${keystore}/rsa2048_key.pem -cert ${keystore}/rsa2048_cert.pem -CAfile ${keystore}/rsa2048_cert.pem -port ${sul.port} -dtls1_2 -mtu 5000
${fuzzer.dir}/suts/openssl-${openssl.version}/apps/openssl s_client -legacy_renegotiation -psk 1234 -key ${keystore}/rsa2048_key.pem -cert ${keystore}/rsa2048_cert.pem -CAfile ${keystore}/rsa2048_cert.pem -port ${sul.port} -dtls1_2 -mtu 5000

# learner config
-randLength
Expand Down
2 changes: 1 addition & 1 deletion args/openssl/learn_openssl_client_psk_reneg
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ ${sul.port}
-responseWait
20
-cmd
${fuzzer.dir}/suts/openssl-${openssl.version}/apps/openssl s_client -psk 1234 -key ${keystore}/rsa2048_key.pem -cert ${keystore}/rsa2048_cert.pem -CAfile ${keystore}/rsa2048_cert.pem -port ${sul.port} -dtls1_2 -mtu 5000 -debug
${fuzzer.dir}/suts/openssl-${openssl.version}/apps/openssl s_client -legacy_renegotiation -psk 1234 -key ${keystore}/rsa2048_key.pem -cert ${keystore}/rsa2048_cert.pem -CAfile ${keystore}/rsa2048_cert.pem -port ${sul.port} -dtls1_2 -mtu 5000 -debug

# learner config
-randLength
Expand Down
26 changes: 26 additions & 0 deletions experiments/models/regression/clients/rounds/openssl-3.5.0_client_ecdhe_cert_reneg/hyp1.dot
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,26 @@
digraph g {

s0 [shape="circle" label="s0"];
s0 -> s0 [label="HELLO_VERIFY_REQUEST / CLIENT_HELLO"];
s0 -> s0 [label="ECDH_SERVER_HELLO / TIMEOUT"];
s0 -> s0 [label="ECDH_SERVER_KEY_EXCHANGE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s0 [label="RSA_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s0 [label="RSA_FIXED_ECDH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s0 [label="RSA_FIXED_DH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s0 [label="DSS_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s0 [label="DSS_FIXED_DH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s0 [label="ECDSA_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s0 [label="HELLO_REQUEST / TIMEOUT"];
s0 -> s0 [label="SERVER_HELLO_DONE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s0 [label="CHANGE_CIPHER_SPEC / TIMEOUT"];
s0 -> s0 [label="FINISHED / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s0 [label="APPLICATION / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s0 [label="CERTIFICATE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s0 [label="EMPTY_CERTIFICATE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s0 [label="Alert(WARNING,CLOSE_NOTIFY) / TIMEOUT"];
s0 -> s0 [label="Alert(FATAL,UNEXPECTED_MESSAGE) / TIMEOUT"];

__start0 [label="" shape="none" width="0" height="0"];
__start0 -> s0;

}
45 changes: 45 additions & 0 deletions experiments/models/regression/clients/rounds/openssl-3.5.0_client_ecdhe_cert_reneg/hyp2.dot
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,45 @@
digraph g {

s0 [shape="circle" label="s0"];
s1 [shape="circle" label="s1"];
s0 -> s0 [label="HELLO_VERIFY_REQUEST / CLIENT_HELLO"];
s0 -> s0 [label="ECDH_SERVER_HELLO / TIMEOUT"];
s0 -> s1 [label="ECDH_SERVER_KEY_EXCHANGE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="RSA_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="RSA_FIXED_ECDH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="RSA_FIXED_DH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="DSS_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="DSS_FIXED_DH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="ECDSA_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="HELLO_REQUEST / TIMEOUT"];
s0 -> s1 [label="SERVER_HELLO_DONE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="CHANGE_CIPHER_SPEC / TIMEOUT"];
s0 -> s1 [label="FINISHED / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="APPLICATION / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="CERTIFICATE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="EMPTY_CERTIFICATE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="Alert(WARNING,CLOSE_NOTIFY) / TIMEOUT"];
s0 -> s1 [label="Alert(FATAL,UNEXPECTED_MESSAGE) / TIMEOUT"];
s1 -> s1 [label="HELLO_VERIFY_REQUEST / TIMEOUT"];
s1 -> s1 [label="ECDH_SERVER_HELLO / TIMEOUT"];
s1 -> s1 [label="ECDH_SERVER_KEY_EXCHANGE / TIMEOUT"];
s1 -> s1 [label="RSA_SIGN_CERTIFICATE_REQUEST / TIMEOUT"];
s1 -> s1 [label="RSA_FIXED_ECDH_CERTIFICATE_REQUEST / TIMEOUT"];
s1 -> s1 [label="RSA_FIXED_DH_CERTIFICATE_REQUEST / TIMEOUT"];
s1 -> s1 [label="DSS_SIGN_CERTIFICATE_REQUEST / TIMEOUT"];
s1 -> s1 [label="DSS_FIXED_DH_CERTIFICATE_REQUEST / TIMEOUT"];
s1 -> s1 [label="ECDSA_SIGN_CERTIFICATE_REQUEST / TIMEOUT"];
s1 -> s1 [label="HELLO_REQUEST / TIMEOUT"];
s1 -> s1 [label="SERVER_HELLO_DONE / TIMEOUT"];
s1 -> s1 [label="CHANGE_CIPHER_SPEC / TIMEOUT"];
s1 -> s1 [label="FINISHED / TIMEOUT"];
s1 -> s1 [label="APPLICATION / TIMEOUT"];
s1 -> s1 [label="CERTIFICATE / TIMEOUT"];
s1 -> s1 [label="EMPTY_CERTIFICATE / TIMEOUT"];
s1 -> s1 [label="Alert(WARNING,CLOSE_NOTIFY) / TIMEOUT"];
s1 -> s1 [label="Alert(FATAL,UNEXPECTED_MESSAGE) / TIMEOUT"];

__start0 [label="" shape="none" width="0" height="0"];
__start0 -> s0;

}
83 changes: 83 additions & 0 deletions experiments/models/regression/clients/rounds/openssl-3.5.0_client_ecdhe_cert_reneg/hyp3.dot
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,83 @@
digraph g {

s0 [shape="circle" label="s0"];
s1 [shape="circle" label="s1"];
s2 [shape="circle" label="s2"];
s3 [shape="circle" label="s3"];
s0 -> s0 [label="HELLO_VERIFY_REQUEST / CLIENT_HELLO"];
s0 -> s2 [label="ECDH_SERVER_HELLO / TIMEOUT"];
s0 -> s1 [label="ECDH_SERVER_KEY_EXCHANGE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="RSA_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="RSA_FIXED_ECDH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="RSA_FIXED_DH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="DSS_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="DSS_FIXED_DH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="ECDSA_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="HELLO_REQUEST / TIMEOUT"];
s0 -> s1 [label="SERVER_HELLO_DONE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="CHANGE_CIPHER_SPEC / TIMEOUT"];
s0 -> s1 [label="FINISHED / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="APPLICATION / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="CERTIFICATE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="EMPTY_CERTIFICATE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s0 -> s1 [label="Alert(WARNING,CLOSE_NOTIFY) / TIMEOUT"];
s0 -> s1 [label="Alert(FATAL,UNEXPECTED_MESSAGE) / TIMEOUT"];
s1 -> s1 [label="HELLO_VERIFY_REQUEST / TIMEOUT"];
s1 -> s1 [label="ECDH_SERVER_HELLO / TIMEOUT"];
s1 -> s1 [label="ECDH_SERVER_KEY_EXCHANGE / TIMEOUT"];
s1 -> s1 [label="RSA_SIGN_CERTIFICATE_REQUEST / TIMEOUT"];
s1 -> s1 [label="RSA_FIXED_ECDH_CERTIFICATE_REQUEST / TIMEOUT"];
s1 -> s1 [label="RSA_FIXED_DH_CERTIFICATE_REQUEST / TIMEOUT"];
s1 -> s1 [label="DSS_SIGN_CERTIFICATE_REQUEST / TIMEOUT"];
s1 -> s1 [label="DSS_FIXED_DH_CERTIFICATE_REQUEST / TIMEOUT"];
s1 -> s1 [label="ECDSA_SIGN_CERTIFICATE_REQUEST / TIMEOUT"];
s1 -> s1 [label="HELLO_REQUEST / TIMEOUT"];
s1 -> s1 [label="SERVER_HELLO_DONE / TIMEOUT"];
s1 -> s1 [label="CHANGE_CIPHER_SPEC / TIMEOUT"];
s1 -> s1 [label="FINISHED / TIMEOUT"];
s1 -> s1 [label="APPLICATION / TIMEOUT"];
s1 -> s1 [label="CERTIFICATE / TIMEOUT"];
s1 -> s1 [label="EMPTY_CERTIFICATE / TIMEOUT"];
s1 -> s1 [label="Alert(WARNING,CLOSE_NOTIFY) / TIMEOUT"];
s1 -> s1 [label="Alert(FATAL,UNEXPECTED_MESSAGE) / TIMEOUT"];
s2 -> s0 [label="HELLO_VERIFY_REQUEST / CLIENT_HELLO"];
s2 -> s1 [label="ECDH_SERVER_HELLO / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s2 -> s1 [label="ECDH_SERVER_KEY_EXCHANGE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s2 -> s1 [label="RSA_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s2 -> s1 [label="RSA_FIXED_ECDH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s2 -> s1 [label="RSA_FIXED_DH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s2 -> s1 [label="DSS_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s2 -> s1 [label="DSS_FIXED_DH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s2 -> s1 [label="ECDSA_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s2 -> s1 [label="HELLO_REQUEST / TIMEOUT"];
s2 -> s1 [label="SERVER_HELLO_DONE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s2 -> s1 [label="CHANGE_CIPHER_SPEC / TIMEOUT"];
s2 -> s1 [label="FINISHED / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s2 -> s1 [label="APPLICATION / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s2 -> s3 [label="CERTIFICATE / TIMEOUT"];
s2 -> s1 [label="EMPTY_CERTIFICATE / Alert(FATAL,DECODE_ERROR)"];
s2 -> s1 [label="Alert(WARNING,CLOSE_NOTIFY) / TIMEOUT"];
s2 -> s1 [label="Alert(FATAL,UNEXPECTED_MESSAGE) / TIMEOUT"];
s3 -> s1 [label="HELLO_VERIFY_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s3 -> s1 [label="ECDH_SERVER_HELLO / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s3 -> s3 [label="ECDH_SERVER_KEY_EXCHANGE / TIMEOUT"];
s3 -> s1 [label="RSA_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s3 -> s1 [label="RSA_FIXED_ECDH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s3 -> s1 [label="RSA_FIXED_DH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s3 -> s1 [label="DSS_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s3 -> s1 [label="DSS_FIXED_DH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s3 -> s1 [label="ECDSA_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s3 -> s1 [label="HELLO_REQUEST / TIMEOUT"];
s3 -> s1 [label="SERVER_HELLO_DONE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s3 -> s1 [label="CHANGE_CIPHER_SPEC / TIMEOUT"];
s3 -> s1 [label="FINISHED / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s3 -> s1 [label="APPLICATION / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s3 -> s1 [label="CERTIFICATE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s3 -> s1 [label="EMPTY_CERTIFICATE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
s3 -> s1 [label="Alert(WARNING,CLOSE_NOTIFY) / TIMEOUT"];
s3 -> s1 [label="Alert(FATAL,UNEXPECTED_MESSAGE) / TIMEOUT"];

__start0 [label="" shape="none" width="0" height="0"];
__start0 -> s0;

}
Loading