Bug#480041: confirmation that debian #480041 is a gnutls problem, and steps to reproduce

Daniel Kahn Gillmor dkg at fifthhorseman.net
Fri Nov 21 20:34:41 CET 2008


On Fri 2008-11-21 14:18:14 -0500, Daniel Kahn Gillmor wrote:

> Attached is a pcap file, and the test key and certificate used by the
> server during the communication.  The client had no certificate.

And here, i've attached a pcap of the connection using openssl, which
actually returns some HTTP output and terminates cleanly.  The openssl
invocation was:

  (sleep 3 && echo -e "$HTTP_QUERY" && sleep 3) | \
   openssl s_client -connect fubar.example.org:443

as compared to the gnutls-cli invocation of:

  (sleep 3 && echo -e "$HTTP_QUERY" && sleep 3) | \
   gnutls-cli fubar.example.org

hope this is useful,

     --dkg

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 480041.openssl.pcap
Type: application/cap
Size: 6141 bytes
Desc: packet capture using openssl s_client
URL: </pipermail/attachments/20081121/ecf666e4/attachment.pcap>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 826 bytes
Desc: not available
URL: </pipermail/attachments/20081121/ecf666e4/attachment.pgp>


More information about the Gnutls-devel mailing list