[Help-gnutls] client certificate authentication

[Nikos Mavrogiannopoulos]

Tristan Hill wrote:
> I have done some more investigation with ssldump:
[...]
> I'm unsure if this is valid behaviour from openssl however.

Thank you. I'm also not sure if this is a valid behavior from us. I
attach a patch, and I'd appreciate if you check and see that it solves
you issue.

The attached patch tries stay on the safe side and don't try to upgrade
the TLS version on a rehandshake. I'm not sure whether this is the right
thing to do, although performing a rehandshake to upgrade the TLS
version seems quite unlikely.

regards,
Nikos
-------------- next part --------------
A non-text attachment was scrubbed...
Name: handshake.patch
Type: text/x-patch
Size: 1295 bytes
Desc: not available
URL: </pipermail/attachments/20090125/d586d10b/attachment.bin>