[gnutls-dev] GNUTLS_E_INTERNAL_ERROR in _gnutls_ciphertext2compressed

Nikos Mavrogiannopoulos nmav at gnutls.org
Tue Nov 13 20:53:16 CET 2007


On Tuesday 13 November 2007, Tim Kosse wrote:
> I've got several reports of failing connections with
> GNUTLS_E_INTERNAL_ERROR.
>
> I could track this problem down to the end of
> _gnutls_ciphertext2compressed in gnutls_cipher.cpp:
>
> if (compress_size < length) return GNUTLS_E_INTERNAL_ERROR
>
> In all these cases, compress_size was 16284. Length was slightly larger

Do you mean 16384 instead?

> by various amounts. For example 16394 was a value I could frequently
> observe.

Well... If I understand correctly your compressed data decompressed to 
something over 2^14.  This is not allowed by the TLS 1.0 spec and this
is the reason you see this error. Are you using gnutls for both peers? 
Which version?


regards,
Nikos




More information about the Gnutls-devel mailing list