[gnutls-devel] GnuTLS | compress_certificate is being set on ServerHello (#1397)

Read-only notification of GnuTLS library development activities gnutls-devel at lists.gnutls.org
Wed Aug 17 10:28:16 CEST 2022



Alexander Sosedkin created an issue: https://gitlab.com/gnutls/gnutls/-/issues/1397



## Description of problem:
compress_certificate is being set on ServerHello

## Version of gnutls used:
master

## How reproducible:
reliably

Steps to Reproduce:

 * `gnutls-serv -a --x509certfile cert.pem --x509keyfile key.pem --compress-cert zlib  -d9`
 * `gnutls-cli localhost:5556`

## Actual results:
|<4>| EXT[0x1f16840]: Preparing extension (Compress Certificate/27) for 'TLS 1.3 server hello'

## Expected results:
`compress_certificate` only being encountered on ClientHello and CertificateRequest, not ServerHello
(https://datatracker.ietf.org/doc/html/rfc8879#section-3).

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1397
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20220817/173d8913/attachment-0001.html>


More information about the Gnutls-devel mailing list