[gnutls-devel] GnuTLS | resume-with-stek-expiration throws a fishy warning (#1181)

Read-only notification of GnuTLS library development activities gnutls-devel at lists.gnutls.org
Fri Feb 12 18:47:42 CET 2021



Andreas Metzler created an issue: https://gitlab.com/gnutls/gnutls/-/issues/1181



After 37e54a05221e076ba905d2d53fc7d885dc9e9ebc resume-with-stek-expiration throws a fishy warning but exits with success.

Patching 3.7.0 release with
e0bb98e1f71f94691f600839ff748d3a9f469d3e
09b40be6e0e0a59ba4bd764067eb353241043a70
05ee0d49fe93d8812ef220c7b830c4b3553ac4fd
37e54a05221e076ba905d2d53fc7d885dc9e9ebc
results in something that seems to break resume-with-stek-expiration without triggering an actual error:
~~~
(sid)ametzler at argenau:/tmp/GNUTLS/gnutls-3.7.0/tests$ ./resume-with-stek-expiration --verbose  ; echo $?

[...]
testing tls1.3 resumption

STEK was rotated!
client: Handshake was completed
server: Handshake was completed
client: Success: Session was NOT resumed
server: Success: Session was NOT resumed
STEK was rotated!
client: Handshake was completed
client: Success: Session was resumed
server: Handshake was completed
server: Success: Session was resumed
STEK was rotated!
server: Handshake was completed
server: Success: Session was resumed
client: Handshake was completed
client: Success: Session was resumed
STEK was rotated!
client: Handshake was completed
server: Handshake was completed
server: Success: Session was NOT resumed
resume_and_close:134: client: Session was resumed (but should not)
Self test `./resume-with-stek-expiration' finished with 0 errors
0
~~~

Not the "resume_and_close:134: client: Session was resumed (but should not)".

(I accidentally stumbled over this while cherrypicking, Git HEAD (2ea09dff25c74a4da598efdc62e7d3b42a11727c) does not show the message.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1181
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20210212/ab088bbe/attachment-0001.html>


More information about the Gnutls-devel mailing list