gnuTLS 3.0.20 - 'Fatal error: The TLS connection was non-properly terminated' against Cisco load balancers

[Nikos Mavrogiannopoulos]

On 06/18/2012 11:36 AM, Scott McGillivray wrote:


> gnutls-cli --priority
> NORMAL:-VERS-TLS-ALL:+VERS-TLS1.0:+VERS-SSL3.0:%COMPAT
> accounts.codemasters.com
> 
> Info on the command found at
> http://www.gnu.org/software/gnutls/manual/gnutls.html#Interoperability
> 
> I wonder what has changed in gnutls and openssl in recent versions that
> prevents them from gratefully downgrading to a supported TLS version when
> connecting to these Cisco CSS units.


The downgrade occurs on the server side. In the case you describe most
probably it's a broken server.

regards,
Nikos