[gnutls-devel] GnuTLS | GNUTLS error at the end of connection (#1739)

[Read-only notification of GnuTLS library development activities]

Simon Josefsson commented: https://gitlab.com/gnutls/gnutls/-/issues/1739#note_2764397473


I don't think it is possible to tell a benign EOF from an attacker causing an early connection closure.  I believe GnuTLS behaviour is correct here, and that this is a security problem in mbedTLS and/or how it is used in curl.  Early connection aborts without proper server closure is a serious error condition, and should be reported as such.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1739#note_2764397473
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20250919/74bf99d3/attachment.html>