<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en" style='--code-editor-font: var(--default-mono-font, "Menlo"), DejaVu Sans Mono, Liberation Mono, Consolas, Ubuntu Mono, Courier New, andale mono, lucida console, monospace;'>
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style data-premailer="ignore" type="text/css">
a { color: #1068bf; }
</style>
<style>img {
max-width: 100%; height: auto;
}
body {
font-size: 0.875rem;
}
body {
-webkit-text-shadow: rgba(255,255,255,0.01) 0 0 1px;
}
body {
font-family: var(--default-regular-font, -apple-system),BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji"; font-size: inherit;
}
</style>
</head>
<body style='font-size: inherit; -webkit-text-shadow: rgba(255,255,255,0.01) 0 0 1px; font-family: var(--default-regular-font, -apple-system),BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";'>
<div class="content">
<p style="color: #777777;">
<a href="https://gitlab.com/yuhaoth">Hao Yu</a>
commented on a
<a href="https://gitlab.com/gnutls/gnutls/-/issues/1429#note_1219627534">discussion</a>:
</p>
<div class="md" style="color: #333238; word-wrap: break-word;">
<blockquote dir="auto" style="font-size: inherit; color: #535158; padding-top: 0.5rem; padding-bottom: 0.5rem; padding-left: 1.5rem; box-shadow: inset 4px 0 0 0 #dcdcde; border-top-width: 0; border-bottom-width: 0; border-right-width: 0; margin: 0 0 0.5rem;" align="initial">
<p style="color: inherit; line-height: 1.5; margin: 0;">It looks like GNUTLS_NEXT_SERV also needs to be set (otherwise the complete test case is skipped).</p>
</blockquote>
<p dir="auto" style="color: #333238; margin: 0 0 16px;" align="initial">Yes.sorry for that.</p>
<blockquote dir="auto" style="font-size: inherit; color: #535158; padding-top: 0.5rem; padding-bottom: 0.5rem; padding-left: 1.5rem; box-shadow: inset 4px 0 0 0 #dcdcde; border-top-width: 0; border-bottom-width: 0; border-right-width: 0; margin: 0.5rem 0;" align="initial">
<p style="color: inherit; line-height: 1.5; margin: 0;">Actually this only happens with KTLS enabled on the system.</p>
</blockquote>
<p dir="auto" style="color: #333238; margin: 0 0 16px;" align="initial">How to check if KTLS enabled ? below is my mod list. There is no <code style='font-size: 0.875rem; color: #1f1e24; word-wrap: break-word; background-color: #ececef; border-radius: 4px; margin-top: 0; font-weight: inherit; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; white-space: pre-wrap; overflow-wrap: break-word; word-break: keep-all; padding: 2px 4px;'>ktls</code> mod.</p>
<div class="gl-relative markdown-code-block js-markdown-code">
<pre lang="plaintext" class="code highlight js-syntax-highlight language-plaintext" data-canonical-lang="" v-pre="true" style='display: block; font-size: 0.875rem; color: #333238; line-height: 1.6em; overflow-x: auto; border-radius: 4px; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; margin: 0 0 16px; padding: 12px; border: 1px solid #dcdcde;'><code style='font-size: 0.875rem; color: inherit; word-wrap: normal; word-break: keep-all; background-color: inherit; border-radius: 4px; white-space: pre; margin-top: 0; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; overflow-wrap: normal; padding: unset;'><span id="LC1" class="line" lang="plaintext" style="margin-top: 0;">Module Size Used by</span>
<span id="LC2" class="line" lang="plaintext">btrfs 1536000 0</span>
<span id="LC3" class="line" lang="plaintext">blake2b_generic 20480 0</span>
<span id="LC4" class="line" lang="plaintext">xor 24576 1 btrfs</span>
<span id="LC5" class="line" lang="plaintext">zstd_compress 225280 1 btrfs</span>
<span id="LC6" class="line" lang="plaintext">raid6_pq 122880 1 btrfs</span>
<span id="LC7" class="line" lang="plaintext">ufs 106496 0</span>
<span id="LC8" class="line" lang="plaintext">qnx4 16384 0</span>
<span id="LC9" class="line" lang="plaintext">hfsplus 114688 0</span>
<span id="LC10" class="line" lang="plaintext">hfs 65536 0</span>
<span id="LC11" class="line" lang="plaintext">minix 49152 0</span>
<span id="LC12" class="line" lang="plaintext">ntfs 122880 0</span>
<span id="LC13" class="line" lang="plaintext">msdos 20480 0</span>
<span id="LC14" class="line" lang="plaintext">jfs 233472 0</span>
<span id="LC15" class="line" lang="plaintext">xfs 1753088 0</span>
<span id="LC16" class="line" lang="plaintext">cpuid 16384 0</span>
<span id="LC17" class="line" lang="plaintext">cmac 16384 0</span>
<span id="LC18" class="line" lang="plaintext">nls_utf8 16384 10</span>
<span id="LC19" class="line" lang="plaintext">cifs 1200128 0</span>
<span id="LC20" class="line" lang="plaintext">cifs_arc4 16384 1 cifs</span>
<span id="LC21" class="line" lang="plaintext">cifs_md4 16384 1 cifs</span>
<span id="LC22" class="line" lang="plaintext">nfsv3 49152 1</span>
<span id="LC23" class="line" lang="plaintext">nfs_acl 16384 1 nfsv3</span>
<span id="LC24" class="line" lang="plaintext">rpcsec_gss_krb5 32768 0</span>
<span id="LC25" class="line" lang="plaintext">auth_rpcgss 139264 1 rpcsec_gss_krb5</span>
<span id="LC26" class="line" lang="plaintext">nfsv4 831488 0</span>
<span id="LC27" class="line" lang="plaintext">nfs 393216 3 nfsv4,nfsv3</span>
<span id="LC28" class="line" lang="plaintext">lockd 110592 2 nfsv3,nfs</span>
<span id="LC29" class="line" lang="plaintext">grace 16384 1 lockd</span>
<span id="LC30" class="line" lang="plaintext">tls 114688 0</span>
<span id="LC31" class="line" lang="plaintext">nft_counter 16384 66</span>
<span id="LC32" class="line" lang="plaintext">nft_chain_nat 16384 18</span>
<span id="LC33" class="line" lang="plaintext">xt_nat 16384 4</span>
<span id="LC34" class="line" lang="plaintext">xt_tcpudp 20480 4</span>
<span id="LC35" class="line" lang="plaintext">nft_compat 20480 26</span>
<span id="LC36" class="line" lang="plaintext">nf_tables 249856 175 nft_compat,nft_counter,nft_chain_nat</span>
<span id="LC37" class="line" lang="plaintext">veth 32768 0</span>
<span id="LC38" class="line" lang="plaintext">ceph 466944 1</span>
<span id="LC39" class="line" lang="plaintext">libceph 450560 1 ceph</span>
<span id="LC40" class="line" lang="plaintext">fscache 389120 3 ceph,cifs,nfs</span>
<span id="LC41" class="line" lang="plaintext">netfs 45056 2 ceph,fscache</span>
<span id="LC42" class="line" lang="plaintext">xt_conntrack 16384 5</span>
<span id="LC43" class="line" lang="plaintext">xt_MASQUERADE 20480 7</span>
<span id="LC44" class="line" lang="plaintext">nf_conntrack_netlink 49152 0</span>
<span id="LC45" class="line" lang="plaintext">nfnetlink 20480 8 nft_compat,nf_conntrack_netlink,nf_tables</span>
<span id="LC46" class="line" lang="plaintext">xfrm_user 40960 5</span>
<span id="LC47" class="line" lang="plaintext">xfrm_algo 16384 1 xfrm_user</span>
<span id="LC48" class="line" lang="plaintext">xt_addrtype 16384 10</span>
<span id="LC49" class="line" lang="plaintext">iptable_filter 16384 1</span>
<span id="LC50" class="line" lang="plaintext">iptable_nat 16384 1</span>
<span id="LC51" class="line" lang="plaintext">nf_nat 49152 4 xt_nat,nft_chain_nat,iptable_nat,xt_MASQUERADE</span>
<span id="LC52" class="line" lang="plaintext">nf_conntrack 172032 5 xt_conntrack,nf_nat,xt_nat,nf_conntrack_netlink,xt_MASQUERADE</span>
<span id="LC53" class="line" lang="plaintext">nf_defrag_ipv6 24576 1 nf_conntrack</span>
<span id="LC54" class="line" lang="plaintext">nf_defrag_ipv4 16384 1 nf_conntrack</span>
<span id="LC55" class="line" lang="plaintext">libcrc32c 16384 6 nf_conntrack,nf_nat,btrfs,nf_tables,xfs,libceph</span>
<span id="LC56" class="line" lang="plaintext">bpfilter 16384 0</span>
<span id="LC57" class="line" lang="plaintext">br_netfilter 28672 0</span>
<span id="LC58" class="line" lang="plaintext">bridge 307200 1 br_netfilter</span>
<span id="LC59" class="line" lang="plaintext">stp 16384 1 bridge</span>
<span id="LC60" class="line" lang="plaintext">llc 16384 2 bridge,stp</span>
<span id="LC61" class="line" lang="plaintext">aufs 270336 0</span>
<span id="LC62" class="line" lang="plaintext">overlay 151552 27</span>
<span id="LC63" class="line" lang="plaintext">binfmt_misc 24576 1</span>
<span id="LC64" class="line" lang="plaintext">nls_iso8859_1 16384 1</span>
<span id="LC65" class="line" lang="plaintext">intel_rapl_msr 20480 0</span>
<span id="LC66" class="line" lang="plaintext">intel_rapl_common 40960 1 intel_rapl_msr</span>
<span id="LC67" class="line" lang="plaintext">i10nm_edac 20480 0</span>
<span id="LC68" class="line" lang="plaintext">ipmi_ssif 40960 0</span>
<span id="LC69" class="line" lang="plaintext">nfit 77824 1 i10nm_edac</span>
<span id="LC70" class="line" lang="plaintext">x86_pkg_temp_thermal 20480 0</span>
<span id="LC71" class="line" lang="plaintext">intel_powerclamp 20480 0</span>
<span id="LC72" class="line" lang="plaintext">coretemp 24576 0</span>
<span id="LC73" class="line" lang="plaintext">kvm_intel 376832 67</span>
<span id="LC74" class="line" lang="plaintext">kvm 1011712 1 kvm_intel</span>
<span id="LC75" class="line" lang="plaintext">crct10dif_pclmul 16384 1</span>
<span id="LC76" class="line" lang="plaintext">ghash_clmulni_intel 16384 0</span>
<span id="LC77" class="line" lang="plaintext">aesni_intel 376832 8</span>
<span id="LC78" class="line" lang="plaintext">mgag200 40960 1</span>
<span id="LC79" class="line" lang="plaintext">crypto_simd 16384 1 aesni_intel</span>
<span id="LC80" class="line" lang="plaintext">cryptd 24576 2 crypto_simd,ghash_clmulni_intel</span>
<span id="LC81" class="line" lang="plaintext">drm_kms_helper 307200 3 mgag200</span>
<span id="LC82" class="line" lang="plaintext">dell_smbios 28672 0</span>
<span id="LC83" class="line" lang="plaintext">cdc_ether 24576 0</span>
<span id="LC84" class="line" lang="plaintext">usbnet 53248 1 cdc_ether</span>
<span id="LC85" class="line" lang="plaintext">rapl 20480 0</span>
<span id="LC86" class="line" lang="plaintext">dcdbas 20480 1 dell_smbios</span>
<span id="LC87" class="line" lang="plaintext">mii 20480 1 usbnet</span>
<span id="LC88" class="line" lang="plaintext">wmi_bmof 16384 0</span>
<span id="LC89" class="line" lang="plaintext">acpi_ipmi 20480 0</span>
<span id="LC90" class="line" lang="plaintext">cec 61440 1 drm_kms_helper</span>
<span id="LC91" class="line" lang="plaintext">dell_wmi_descriptor 20480 1 dell_smbios</span>
<span id="LC92" class="line" lang="plaintext">intel_cstate 20480 0</span>
<span id="LC93" class="line" lang="plaintext">rc_core 61440 1 cec</span>
<span id="LC94" class="line" lang="plaintext">i2c_algo_bit 16384 1 mgag200</span>
<span id="LC95" class="line" lang="plaintext">ipmi_si 73728 1</span>
<span id="LC96" class="line" lang="plaintext">fb_sys_fops 16384 1 drm_kms_helper</span>
<span id="LC97" class="line" lang="plaintext">mei_me 40960 0</span>
<span id="LC98" class="line" lang="plaintext">syscopyarea 16384 1 drm_kms_helper</span>
<span id="LC99" class="line" lang="plaintext">ipmi_devintf 20480 0</span>
<span id="LC100" class="line" lang="plaintext">isst_if_mbox_pci 16384 0</span>
<span id="LC101" class="line" lang="plaintext">isst_if_mmio 16384 0</span>
<span id="LC102" class="line" lang="plaintext">sysfillrect 20480 1 drm_kms_helper</span>
<span id="LC103" class="line" lang="plaintext">intel_pch_thermal 20480 0</span>
<span id="LC104" class="line" lang="plaintext">ipmi_msghandler 122880 4 ipmi_devintf,ipmi_si,acpi_ipmi,ipmi_ssif</span>
<span id="LC105" class="line" lang="plaintext">efi_pstore 16384 0</span>
<span id="LC106" class="line" lang="plaintext">sysimgblt 16384 1 drm_kms_helper</span>
<span id="LC107" class="line" lang="plaintext">isst_if_common 24576 2 isst_if_mmio,isst_if_mbox_pci</span>
<span id="LC108" class="line" lang="plaintext">mei 135168 1 mei_me</span>
<span id="LC109" class="line" lang="plaintext">acpi_power_meter 20480 0</span>
<span id="LC110" class="line" lang="plaintext">mac_hid 16384 0</span>
<span id="LC111" class="line" lang="plaintext">sch_fq_codel 24576 9</span>
<span id="LC112" class="line" lang="plaintext">msr 16384 0</span>
<span id="LC113" class="line" lang="plaintext">parport_pc 53248 0</span>
<span id="LC114" class="line" lang="plaintext">ppdev 24576 0</span>
<span id="LC115" class="line" lang="plaintext">lp 28672 0</span>
<span id="LC116" class="line" lang="plaintext">parport 69632 3 parport_pc,lp,ppdev</span>
<span id="LC117" class="line" lang="plaintext">drm 618496 4 drm_kms_helper,mgag200</span>
<span id="LC118" class="line" lang="plaintext">sunrpc 581632 12 nfsv4,auth_rpcgss,lockd,nfsv3,rpcsec_gss_krb5,nfs_acl,nfs</span>
<span id="LC119" class="line" lang="plaintext">ip_tables 32768 2 iptable_filter,iptable_nat</span>
<span id="LC120" class="line" lang="plaintext">x_tables 53248 9 xt_conntrack,iptable_filter,nft_compat,xt_tcpudp,xt_addrtype,xt_nat,ip_tables,iptable_nat,xt_MASQUERADE</span>
<span id="LC121" class="line" lang="plaintext">autofs4 49152 5</span>
<span id="LC122" class="line" lang="plaintext">ahci 45056 0</span>
<span id="LC123" class="line" lang="plaintext">i2c_i801 36864 0</span>
<span id="LC124" class="line" lang="plaintext">xhci_pci 24576 0</span>
<span id="LC125" class="line" lang="plaintext">crc32_pclmul 16384 0</span>
<span id="LC126" class="line" lang="plaintext">megaraid_sas 192512 3</span>
<span id="LC127" class="line" lang="plaintext">tg3 192512 0</span>
<span id="LC128" class="line" lang="plaintext">i2c_smbus 20480 1 i2c_i801</span>
<span id="LC129" class="line" lang="plaintext">libahci 45056 1 ahci</span>
<span id="LC130" class="line" lang="plaintext">xhci_pci_renesas 20480 1 xhci_pci</span>
<span id="LC131" class="line" lang="plaintext">intel_pmt 16384 0</span>
<span id="LC132" class="line" lang="plaintext"></span></code></pre>
<copy-code></copy-code>
</div>
<blockquote dir="auto" style="font-size: inherit; color: #535158; padding-top: 0.5rem; padding-bottom: 0.5rem; padding-left: 1.5rem; box-shadow: inset 4px 0 0 0 #dcdcde; border-top-width: 0; border-bottom-width: 0; border-right-width: 0; margin: 0.5rem 0;" align="initial">
<p style="color: inherit; line-height: 1.5; margin: 0;">With this, I cannot reproduce the issues: the server responds with Server Hello in the second handshake without HRR, and thus there is no chance of Client Hello being sent twice.</p>
</blockquote>
<p dir="auto" style="color: #333238; margin: 0 0 16px;" align="initial">I just compare your log with my log. HRR is received by <code style='font-size: 0.875rem; color: #1f1e24; word-wrap: break-word; background-color: #ececef; border-radius: 4px; margin-top: 0; font-weight: inherit; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; white-space: pre-wrap; overflow-wrap: break-word; word-break: keep-all; padding: 2px 4px;'>gnutls-cli</code>. I do not get the reason from the logs.</p>
<p dir="auto" style="color: #333238; margin: 0 0 16px;" align="initial">In my test logs <a href="https://gitlab.com/gnutls/gnutls/uploads/5ee680dafbf2d15a5e739ff58aef31b1/o-cli-1.log" data-canonical-src="/uploads/5ee680dafbf2d15a5e739ff58aef31b1/o-cli-1.log" data-link="true" class="gfm" style="margin-top: 0;">o-cli-1.log</a> and <a href="https://gitlab.com/gnutls/gnutls/uploads/e094356e7270413db7d3dabd05b27056/o-srv-1.log" data-canonical-src="/uploads/e094356e7270413db7d3dabd05b27056/o-srv-1.log" data-link="true" class="gfm">o-srv-1.log</a>, <code style='font-size: 0.875rem; color: #1f1e24; word-wrap: break-word; background-color: #ececef; border-radius: 4px; font-weight: inherit; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; white-space: pre-wrap; overflow-wrap: break-word; word-break: keep-all; padding: 2px 4px;'>gnutls-cli</code> can receive HRR message. And my environment is gnutls-3.7.3 and ubuntu-22.04</p>
<p dir="auto" style="color: #333238; margin: 0;" align="initial">And I have update the branch to enable more logs.</p>
</div>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #737278;">
—
<br>
Reply to this email directly or <a href="https://gitlab.com/gnutls/gnutls/-/issues/1429#note_1219627534">view it on GitLab</a>.
<br>
You're receiving this email because of your account on <a target="_blank" rel="noopener noreferrer" href="https://gitlab.com">gitlab.com</a>. <a href="https://gitlab.com/-/sent_notifications/54a125cf09eeda3d8972764b38227f12/unsubscribe" target="_blank" rel="noopener noreferrer">Unsubscribe</a> from this thread · <a href="https://gitlab.com/-/profile/notifications" target="_blank" rel="noopener noreferrer" class="mng-notif-link">Manage all notifications</a> · <a href="https://gitlab.com/help" target="_blank" rel="noopener noreferrer" class="help-link">Help</a>
<script type="application/ld+json">{"@context":"http://schema.org","@type":"EmailMessage","action":{"@type":"ViewAction","name":"View Issue","url":"https://gitlab.com/gnutls/gnutls/-/issues/1429#note_1219627534"}}</script>
</p>
</div>
</body>
</html>