[Patch] Fix blocking DTLS
s_buckhe at cs.uni-kl.de
Thu Feb 16 14:29:40 CET 2012
investigating blocking DTLS handshake failure, I found that they fail
because the server will interpret a retransmitted Finished packet from
the client just as it would treat a Hello, and spuriosly initiates
rehandshake. Only handling the Hello packets in this manner fixes that,
and now all dtls-stress handshake sequences pass (with appropriate
timeouts for such an adversarial network).
Patch is attached.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 1106 bytes
Desc: not available
More information about the Gnutls-devel