[Help-gnutls] GNUTLS ERROR: A TLS packet with unexpected length was received.

[John Brooks]

Drawing on my knowledge of unrealircd for this (which is somewhat outdated,
but I believe still correct), my guess is that you're hitting the throttling
limit of the ircd. After a certain number of connections from an IP in a
certain amount of time, it starts rejecting new ones - and I wouldn't be
suprised if it rejects their handshakes as well (save resources, DDoS
prevention). I believe this is configurable - check the config and try
connecting repeatedly without SSL to see what it says.

Another possibility is that the IP is Z-Lined; unrealircd will send an ERROR
in plaintext even if you attempt to connect with SSL (which will show up as
exactly that error). Again, to prevent excess resource usage and help stop
DDoS.

Either way, i'm inclined to think that this is one of those two slightly
misguided features of unrealircd, rather than a SSL issue. Inspircd is
better anyway :P

- John Brooks

On Tue, Aug 26, 2008 at 5:01 PM, darkdemun <darkdemun at gmail.com> wrote:

>
> Hi, I'm making a SSL IRC bot just for learning. The thing is I get "GNUTLS
> ERROR: A TLS packet with unexpected length was received." when handshaking
> every 4 connections (and if i keep trying to connect it'll keep happening
> till i wait for a bit) and i have no idea why, I have attached a log from
> gnutls-cli.
> Also I don't get the error when connecting to a inspircd server (only tried
> connecting to unrealircd servers), I'm using x509 certificate authentication
> and basically using the code from the examples. I'm using windows by the
> way, If any of you could help i'd greatly appreciate it.
>
> --
> Cain.
>
> _______________________________________________
> Help-gnutls mailing list
> Help-gnutls at gnu.org
> http://lists.gnu.org/mailman/listinfo/help-gnutls
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/attachments/20080827/1c021ead/attachment.htm>