Unexpected message, handshake failed

Nikos Mavrogiannopoulos nmav at gnutls.org
Fri Feb 10 16:54:43 CET 2012

If you run gnutls-cli-debug on the server it shows that it is pretty broken.

Checking whether %COMPAT is required... yes
Checking for TLS 1.0 support... yes
Checking for TLS 1.1 support... no
Checking fallback from TLS 1.1 to... failed

It fails to understand non-minimal padded records and fails if it sees
TLS 1.1 or laters.

You might want to check:

(this is for gnutls 2.12.0+ though, I don't know if this priority string
would work on 2.10.)


On 02/10/2012 04:31 PM, Laurence Rochfort wrote:

> Hi Nikos,
> I'm running 2.10.2.
> Did you use port 5223?  I find that port 443, works for me, but I need to
> use 5223 for XMPP.
> I'm within Oracle, so maybe that has something to do with it.  Could you
> provide a tracert and example of what you're seeing?
> Many thanks for looking at this,
> Laurence.
> On 10 February 2012 15:07, Nikos Mavrogiannopoulos <nmav at gnutls.org> wrote:
>> On 02/10/2012 12:45 PM, Laurence Rochfort wrote:
>>> gnutls is producing the following error for a certificate, prevents
>>> all gnutls backed applications from connecting.  openssl backed
>>> applications connect successfully.
>>> I have no access to the server, but any advice that would allow my
>>> gnutls backed applications to work would be very much appreciated.
>> Which gnutls is that? I just tried stbeehive.oracle.com and it seems to
>> work.
>> regards,
>> Nikos

More information about the Gnutls-help mailing list