<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">
<p style="color: #777777;">
<a href="https://gitlab.com/rrivers2">rrivers2</a>
commented:
</p>
<div style="">
<p dir="auto"><a href="https://gitlab.com/gnutls/gnutls/uploads/26bec94f704ed4f5530703e377d7232b/allow_zero_length_session_tickets.patch" data-link="true" class="gfm">allow_zero_length_session_tickets.patch</a></p>
<p dir="auto">Daiki,</p>
<p dir="auto">Will Ubuntu upgrade the version of GnuTLS in 18.04 from 3.5 to 3.6? If not, I attached a first cut at a patch to allow zero length sessions tickets returned by a server. It is based on the latest source code from Ubuntu 18.04 in the gnutls28-3.5.18 package. After the patch is applied gnutls-cli will connect to pop.verizon.net:995 successfully, display the banner and prompt for input:</p>
<pre class="code highlight js-syntax-highlight plaintext" lang="plaintext" v-pre="true"><code><span id="LC1" class="line" lang="plaintext">- Handshake was completed</span>
<span id="LC2" class="line" lang="plaintext"></span>
<span id="LC3" class="line" lang="plaintext">- Simple Client Mode:</span>
<span id="LC4" class="line" lang="plaintext"></span>
<span id="LC5" class="line" lang="plaintext">+OK Hello from jpop-0.1</span></code></pre>
<p dir="auto">More testing is needed to make sure that setting priv->session_ticket to NULL and priv->session_ticket_len to 0 doesn't break the rest of the code.</p>
<p dir="auto">Testing with the current version of OpenSSL on Ubuntu 18.04.4 (1.1.1-1ubuntu2.1~18.04.5) showed that it is able to handle zero length session tickets:</p>
<pre class="code highlight js-syntax-highlight plaintext" lang="plaintext" v-pre="true"><code><span id="LC1" class="line" lang="plaintext">openssl s_client -msg -tls1_2 -connect pop.verizon.net:995</span>
<span id="LC2" class="line" lang="plaintext"></span>
<span id="LC3" class="line" lang="plaintext"><<< TLS 1.2, Handshake [length 000a], NewSessionTicket</span>
<span id="LC4" class="line" lang="plaintext"> 04 00 00 06 00 00 00 3c 00 00</span></code></pre>
<p dir="auto">It displays the banner and waits for input.</p>
</div>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #777;">
—
<br>
Reply to this email directly or <a href="https://gitlab.com/gnutls/gnutls/-/issues/997#note_347792969">view it on GitLab</a>.
<br>
You're receiving this email because of your account on gitlab.com.
If you'd like to receive fewer emails, you can
<a href="https://gitlab.com/-/sent_notifications/afcf5305561c8c82ff88034f517213a9/unsubscribe">unsubscribe</a>
from this thread or
adjust your notification settings.
<script type="application/ld+json">{"@context":"http://schema.org","@type":"EmailMessage","action":{"@type":"ViewAction","name":"View Issue","url":"https://gitlab.com/gnutls/gnutls/-/issues/997#note_347792969"}}</script>
</p>
</div>
</body>
</html>