SSL Alert Protocol

• The SSL Alert Protocol signals problems with an SSL session.
  • Alert messages convey the severity of the message and a description of the alert.
  • Upon transmission or receipt of a fatal alert message, both parties immediately close the connection.

• The client and the server must communicate that the connection is ending to avoid a truncation attack.
  • Either party may initiate the exchange of closing messages.
  • Normal termination occurs when the close_notify message is sent.
    • This message notifies the recipient that the sender will not send any more messages on this connection.
  • The session becomes unresumable if any connection is terminated without a proper close_notify message.

What are the error alerts?

---

---

© 2006 John Michael Pierobon

Notes