An issue that wont die? A TLS packet with unexpected length was received

Nikos Mavrogiannopoulos nmav at gnutls.org
Tue Sep 7 18:35:18 CEST 2010


On 09/07/2010 02:39 PM, Jonathan Plews wrote:
> On servers that get these errors: 2.4.2-6+lenny2 and 2.8.6-1 (both from
> debian packages)
> 
> I can try downloading latest source, but these are all live servers so I
> have to be careful, I've already taken some heat because of problems ;)
> I just wanted to see if anyone knew anything before putting time into
> things like that.

I suspect that the peer doesn't like the fact that a big list of CA
names is being sent to him. Could you try the attached patch with a test
server?

regards,
Nikos
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: patch.txt
URL: </pipermail/attachments/20100907/3d89d5e9/attachment.txt>


More information about the Gnutls-help mailing list