Re: [TLS] TLS or HTTP issue?

[Florian Weimer <fweimer at bfk.de>]

* Nikos Mavrogiannopoulos:

> I'll become a bit pedantic and note here that this isn't really a TLS
> issue.

I'm not sure.  We've got a middleware which provides RPC services over
TLS with certificates on both ends, and it happens that we're
vulnerable as well[1], even though we require client certificates from
the start.  Suppose that there is an RPC which is some sort of store
operation, allowing reading back the stored data by the client.  The
attacker pre-loads half of such an RFC call, triggers renegotation,
and splices this connection to an unsuspecting client.  The client
will complete the RPC call, the server will save the call contents
(including metadata) as the payload of the store request that precedes
it, associated with the attacker's certificate (because it sticks to
the certificate it saw first).  The attacker can use the service to
read back the saved call contents, gaining access to data it would not
ordinarily have access to.

Theoretically, this attack can be detected by the server, but not
using the APIs that are currently deployed.  You are right that HTTP
is worse, but based on the attack sketched above, the basic issue also
affects other services.

[1] We've got other safeguards which prevent actual exploitation in
our case, but the theoretical vulnerability is still there.

-- 
Florian Weimer                <fweimer at bfk.de>
BFK edv-consulting GmbH       http://www.bfk.de/
Kriegsstraße 100              tel: +49-721-96201-1
D-76133 Karlsruhe             fax: +49-721-96201-99