Successfully connected
TLS 1.3 OK; HelloRetryRequest used;
Detailed description:
v.0.22.1-l
(This TLS-1.3-only server supports ESNI, HelloRetryRequest, KeyUpdate, ECDHE, FFDHE, etc.)
HelloRetryRequest used to (re)negotiate DH group
First ClientHello, key shares: 0x001D
Second ClientHello, key shares: 0x0018
CRYPTO_CONTEXT
Protocol version: 0x0304
Cipher suite: 0x1303 (TLS_CHACHA20_POLY1305_SHA256)
Key exchange: 0x0018 (Secp384r1)
(Handshake level)
Handshake secrets:
Client: 0xF0CDE836B805ACEB62543957E2BD9C5B10DCC702D944BC192137C5FE9C0DAAA0
Server: 0x90A1AA7F556AA86531F9FE19C3098180C1A84717951CFA813A494586D2E11D93
Handshake keys:
Client write: 0x86A299C1A352395A6151E9BDAE49E4875F5D221F295CB7AF2DA96900111D6B0D
Server write: 0xD58D74ED14232F2C2A1074241D83E8D0B9D7E0C6BBC45DFE4A2387D317DAC351
Handshake IVs:
Client write (IV): 0x815D80F25C14740A0ED87586
Server write (IV): 0x2A239D7ECBFC6CEE69221778
(Traffic level)
Traffic secrets:
Client: 0x702F9BBBF7E0E709FCF2A73B2C023F8D7A30A062C589033531700A9C12BD5810
Server: 0x8AEE282CF150A80E7FFCCD498B385B46693B1F9B3E9BF60DF8720BDC8E170D4E
Traffic keys:
Client write: 0x6F39B9DC5934D772FE46A7363375C7A5900014E4EF12D46B392D5F93BCD83C5D
Server write: 0x76EDAC00F6D129F91ADCD7A71DB21B93E23CE7ED01CA04F24FD27C6415F15222
Traffic base IVs:
Client write (base IV): 0x6532459A4E25012C0CAF0558
Server write (base IV): 0x5B93717CD453F729FE4F62F7
--- Messages ---
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xCCA8
0xC02F,0xC014,0xC013,0x009D,0x009C,0x0035,0x002F
Client Random: 34:EE:8D:00:E6:3F:9F:9F:E5:A7:C4:D3:17:B7:9A:6A:D1:1C:91:4C:05:80:B0:4B:8F:49:C8:81:D1:9B:E3:C2
Client SessionID: AD:77:48:36:00:93:8C:ED:73:34:D3:23:FF:EF:79:8B:84:6D:7C:5A:51:04:2C:F3:FD:48:30:AE:E0:85:AB:E0
Extensions:
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
0x0019 (Secp521r1)
0x001E (X448)
0x0100 (ffdhe2048)
0x0101 (ffdhe3072)
0x0102 (ffdhe4096)
0x0103 (ffdhe6144)
0x0104 (ffdhe8192)
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 13 (0x000D); "signature_algorithms"
00:26:04:03:05:03:06:03:08:04:08:05:08:06:08:09
08:0A:08:0B:04:01:05:01:06:01:04:02:03:03:03:01
03:02:02:03:02:01:02:02
Type: 50 (0x0032); "signature_algorithms_cert"
00:26:04:03:05:03:06:03:08:04:08:05:08:06:08:09
08:0A:08:0B:04:01:05:01:06:01:04:02:03:03:03:01
03:02:02:03:02:01:02:02
Type: 16 (0x0010); "application_layer_protocol_negotiation"
00:09:08:68:74:74:70:2F:31:2E:31
Type: 17 (0x0011); /non-TLS-1.3/
00:07:02:00:04:00:00:00:00
Type: 23 (0x0017); /non-TLS-1.3/
Type: 43 (0x002B); "supported_versions"
0x0304
0x0303
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 51 (0x0033); "key_share"
X25519 (0x001D)
x = 0x2A9015F6AA398E0E088598CCD6D1F38D91C7E8D3211E43F89E821DE17C1BDE06
Type: 65281 (0xFF01); /non-TLS-1.3/
00
HELLO_RETRY_REQUEST (sent, server)
Legacy Version: 0x0303
Cipher suite: 0x1303 (TLS_CHACHA20_POLY1305_SHA256)
HelloRetryRequest (Server Random): CF:21:AD:74:E5:9A:61:11:BE:1D:8C:02:1E:65:B8:91:C2:A2:11:16:7A:BB:8C:5E:07:9E:09:E2:C8:A8:33:9C
SessionID: AD:77:48:36:00:93:8C:ED:73:34:D3:23:FF:EF:79:8B:84:6D:7C:5A:51:04:2C:F3:FD:48:30:AE:E0:85:AB:E0
Extensions:
Type: 51 (0x0033); "key_share"
Secp384r1 (0x0018)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xCCA8
0xC02F,0xC014,0xC013,0x009D,0x009C,0x0035,0x002F
Client Random: 34:EE:8D:00:E6:3F:9F:9F:E5:A7:C4:D3:17:B7:9A:6A:D1:1C:91:4C:05:80:B0:4B:8F:49:C8:81:D1:9B:E3:C2
Client SessionID: AD:77:48:36:00:93:8C:ED:73:34:D3:23:FF:EF:79:8B:84:6D:7C:5A:51:04:2C:F3:FD:48:30:AE:E0:85:AB:E0
Extensions:
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
0x0019 (Secp521r1)
0x001E (X448)
0x0100 (ffdhe2048)
0x0101 (ffdhe3072)
0x0102 (ffdhe4096)
0x0103 (ffdhe6144)
0x0104 (ffdhe8192)
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 13 (0x000D); "signature_algorithms"
00:26:04:03:05:03:06:03:08:04:08:05:08:06:08:09
08:0A:08:0B:04:01:05:01:06:01:04:02:03:03:03:01
03:02:02:03:02:01:02:02
Type: 50 (0x0032); "signature_algorithms_cert"
00:26:04:03:05:03:06:03:08:04:08:05:08:06:08:09
08:0A:08:0B:04:01:05:01:06:01:04:02:03:03:03:01
03:02:02:03:02:01:02:02
Type: 16 (0x0010); "application_layer_protocol_negotiation"
00:09:08:68:74:74:70:2F:31:2E:31
Type: 17 (0x0011); /non-TLS-1.3/
00:07:02:00:04:00:00:00:00
Type: 23 (0x0017); /non-TLS-1.3/
Type: 43 (0x002B); "supported_versions"
0x0304
0x0303
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 51 (0x0033); "key_share"
Secp384r1 (0x0018)
x = 0x6472E94739BB45D0EE9C3F3CD0E2FDE449A8812A5DFEA2C80AC3982332E6A6CE18AFDD04C270965AAD23534E035E5D38
y = 0xCA6375EB1E62E7B7242C323DD8DEE89FAB0D7239797AF2ED6096071169BF80B4E923699812C95D422585E4F79FF2B8C4
Type: 65281 (0xFF01); /non-TLS-1.3/
00
SERVER_HELLO (sent)
Legacy Version: 0x0303
Cipher suite: 0x1303 (TLS_CHACHA20_POLY1305_SHA256)
Server Random: DE:AD:DE:AD:DE:AD:C0:DE:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00
SessionID: AD:77:48:36:00:93:8C:ED:73:34:D3:23:FF:EF:79:8B:84:6D:7C:5A:51:04:2C:F3:FD:48:30:AE:E0:85:AB:E0
Extensions:
Type: 51 (0x0033); "key_share"
Secp384r1 (0x0018)
x = 0x884DFC0FE9602539133D59E3779E9DE8644D3532211C1061EFD16D15BE349D6723496325775E87CF3D396F1C02FCC5CF
y = 0x063315C18E34D26B9085A96A495F17B8557DB379DB6ABED0788C60417FCE917ADD8976BB955D9E7E1B1CC6C06F577280
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
SERVER_HANDSHAKE_MESSAGES (sent)
Type: 8 (0x08) - "encrypted_extensions"
Length (octets, dec.): 2
00:00
Type: 11 (0x0B) - "certificate"
Length (octets, dec.): 4251
[...] /skipped 4251 data octets/
Type: 15 (0x0F) - "certificate_verify"
Length (octets, dec.): 107
05:03:00:67:30:65:02:31:00:C0:C5:7B:D1:CE:CD:08:47:3A:E4:3F:CA:07:76:52:C1:02:AF:3B:4C:97:65:4F
1A:AA:0D:B2:5F:05:43:C5:19:6C:1D:C9:52:A7:19:05:C2:56:0C:1E:6F:C0:52:DB:30:02:30:50:57:CC:42:E5
63:38:D7:43:DB:46:AA:93:EB:36:DD:6D:E2:19:F5:0E:48:5E:E5:0C:C1:31:B5:CE:67:0F:7A:4B:1A:03:C8:41
AA:FD:A2:2D:FE:BD:9D:34:B7:E3:E1
Type: 20 (0x14) - "finished"
Length (octets, dec.): 32
06:0B:7F:A5:98:6B:CE:D6:6C:95:AE:BD:EE:4E:BF:2F:5A:11:A2:2C:5F:BB:BE:23:93:45:E0:98:2F:C3:D0:C0
[Legacy ChangeCipherSpec message present (client)]
CLIENT_FINISHED (received)
Finished value: 0xFC05AC02349C62B2D8D2A4C71AA001570D735C91BD811DCFE00B751F04BFCAB2
Client Finished status: OK
CLIENT_APPLICATION_DATA (recieved)
ASCII dump (filtered):
GET / HTTP/1.1..User-Agent: CCBot/2.0 (https://commoncrawl.org/f
aq/)..Accept: text/html,application/xhtml+xml,application/xml;q=
0.9,*/*;q=0.8..Accept-Language: en-US,en;q=0.5..If-Modified-Sinc
e: Wed, 08 Feb 2023 20:05:13 GMT..Accept-Encoding: br,gzip..Host
: tls13.1d.pw..Connection: Keep-Alive....
TCP: server: 194.87.109.56:443; client: 34.232.62.64:42440; timestamp: 1679809276
Contacts: dxdt.ru, alex/()\/abaabb.xyz.
/\_/\
( 0.0 )
= ^ =
/|_|\
(") (")=~
Provide ESNI to get second ASCII cat
Elapsed server side: 319ms; ServerHello sent: 103ms (including HelloRetryRequest time); TLS connection established: 319ms.