Is it possible to debug inside the bctls-fips JAR?

[cyberdon333]

I'm trying to enable Hello Verify Request on my DTLS server using the DTLSVerifier class. However, the verifyRequest method always returns null, and I don't see the server sending a cookie with hello-verify-request to the client in Wireshark.

I know a debug version of the bcfips JAR exists. Is there a way to debug the classes inside the bctls-fips.jar?

[dghgit]

Which version of the jar are you looking at?

[cyberdon333]

@dghgit I am using bctls-fips - 2.0.19

[srivilliamsai]

Yes. You can debug the classes inside bctls-fips.jar by using the debug builds of the BouncyCastle FIPS libraries. Download bcfips-debug.jar and bctls-fips-debug.jar from the official BouncyCastle FIPS distribution page and replace your existing JARs.
Then run your app with:

-Dorg.bouncycastle.tls.debug=true
-Dorg.bouncycastle.tls.verbose=true

Attach the provided source JARs in your IDE for step-through debugging.

If DTLSVerifier.verifyRequest() always returns null, it means the server hasn’t sent a HelloVerifyRequest. You need to call verifier.verifyRequest(clientHello) and handle a null return by generating and sending the cookie using verifier.getCookie(clientHello) before proceeding with the handshake.