Skip to content

Client handshake updates#3038

Merged
drwetter merged 11 commits into
3.3devfrom
more_handshakes_updates
May 18, 2026
Merged

Client handshake updates#3038
drwetter merged 11 commits into
3.3devfrom
more_handshakes_updates

Conversation

@drwetter
Copy link
Copy Markdown
Collaborator

@drwetter drwetter commented May 16, 2026 •
edited
Loading

  • Apple 26.x : done, Apple handshakes updates #3036 merged hereto
  • OpenSSL 4.0 : done
  • Android 16: done. Same as previous version
  • more ja3/ja4 "checksums" added for already existing handshakes
  • updated t/61_diff_testsslsh.t in the end
  • consolidated same clientHellos

Closes #2908, #3037, #3027, #2746

What is your pull request about?

  • Bug fix
  • Improvement
  • New feature (adds functionality)
  • Breaking change (bug fix, feature or improvement that would cause existing functionality to not work as expected)
  • Typo fix
  • Documentation update
  • Update of other files

If it's a code change please check the boxes which are applicable

  • For the main program: My edits contain no tabs, indentation is five spaces and any line endings do not contain any blank chars
  • I've read CONTRIBUTING.md and Coding_Convention.md
  • I have tested this fix or improvement against >=2 hosts and I couldn't spot a problem
  • I have tested this new feature against >=2 hosts which show this feature and >=2 host which does not (in order to avoid side effects) . I couldn't spot a problem
  • For the new feature I have made corresponding changes to the documentation and / or to help()
  • If it's a bigger change: I added myself to CREDITS.md (alphabetical order) and the change to CHANGELOG.md

@drwetter drwetter marked this pull request as draft May 16, 2026 15:05
@drwetter
Copy link
Copy Markdown
Collaborator Author

drwetter commented May 17, 2026

FYI: OpenSSL 4.0 offers some surprises for the supported groups TLS extension:

image

Signature algorithms TLS extension:

image

drwetter added 5 commits May 18, 2026 16:50
@drwetter
Android 16
7897cdc 
As mentioned in the comment: For Androids ja3 is is not unique, probably because of GREASE.
One can add two handshakes after another and they are different. ja4 seems more consistent here.

This should be kept in mind for all clients "supplying some grease"
@drwetter
Consolidated Handshakes
b4e58df 
went through a couple of pcap files and determined ja3 + ja4 sums.

- Android 15/16 are the same (previously ja3 taken instead of ja4 and wrong host. One has to use chrome !)
- Edge 101/Chrome 101 are the same (will be deprated next time)
- surprisingly Java 17.0.3 and 21.0.6 were the same.

- Added: Ja3/ja4 for old Apple Mail and Thunderbird
@drwetter
Consolidate handshakes for all Safaris 26.4
56697ce 
Looked before at ja3, but for Chromium-browsers ja4 is relevant.
The client column needed to be extended with 1 space.
@drwetter
correct name
01b7ad7
@drwetter
adjust baseline runner output
7871d80
@drwetter drwetter marked this pull request as ready for review May 18, 2026 20:13
@drwetter drwetter merged commit 84235d3 into 3.3dev May 18, 2026
5 checks passed
@drwetter drwetter deleted the more_handshakes_updates branch May 18, 2026 20:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

[Feature request] update Safari iOS and macOS handshake to v26

1 participant

@drwetter