psk based TLS with openssl about conscrypt HOT 4 CLOSED

PSK means "pre-shared key" which means that it's on you to ensure that both ends have the same pre-shared key. It sounds like you are using "afakekey" on one side and 1A1A1A1A1A1A1A1A1A1A1A1A1A1A1A1A on the other, which is naturally not going to work.

Of course, neither "afakekey" nor 1A1A1A1A1A1A1A1A1A1A1A1A1A1A1A1A are acceptable keys outside a test environment, as this key must be secret. Embedding a key into your client binary would also not be acceptable in most circumstances as anyone who can download the binary can just extract it. PSK is very rarely what you actually want.

from conscrypt.

Hi david,
My bad, I'm using "1A1A1A1A1A1A1A1A1A1A1A1A1A1A1A1A" in both sides. I'm using this setup just to test my code first. the way to get and store the keys is totally different.

from conscrypt.

OpenSSL appears to decode your argument as hex whereas String.getBytes won't. Try new byte[]{ 0x1a, 0x1a, 0x1a, (etc)}.

from conscrypt.

Thanks much, this solved my issue.

from conscrypt.