Re: Emacs core TLS support

[Lars Magne Ingebrigtsen]

Ok, now we're getting somewhere.

With the following dirty patch:

=== modified file 'src/gnutls.c'
*** src/gnutls.c        2010-09-26 06:06:28 +0000
--- src/gnutls.c        2010-09-27 13:52:46 +0000
***************
*** 221,226 ****
--- 221,230 ----
    return gnutls_make_error (GNUTLS_E_SUCCESS);
  }
  
+ void my_log_function (int level, const char* string) {
+   message("hello: %d %s", strlen(string), string);
+ }
+ 
  DEFUN ("gnutls-boot", Fgnutls_boot, Sgnutls_boot, 3, 6, 0,
         doc: /* Initializes client-mode GnuTLS for process PROC.
  Currently only client mode is supported.  Returns a success/failure
***************
*** 264,269 ****
--- 268,276 ----
  
    state = XPROCESS (proc)->gnutls_state;
  
+   gnutls_global_set_log_level(9);
+   gnutls_global_set_log_function(my_log_function);
+   
    /* always initialize globals.  */
    global_init = gnutls_emacs_global_init ();
    if (! NILP (Fgnutls_errorp (global_init)))


I get the following output (after a lot of other output):

gnutls: handshake: handshaking
hello: 73 REC[0x16bbe20]: Expected Packet[3] Change Cipher Spec(20) with 
length: 1

hello: 73 REC[0x16bbe20]: Received Packet[3] Change Cipher Spec(20) with 
length: 1

hello: 28 ASSERT: gnutls_cipher.c:204

hello: 53 REC[0x16bbe20]: ChangeCipherSpec Packet was received

hello: 46 HSK[0x16bbe20]: Cipher Suite: RSA_ARCFOUR_MD5

hello: 61 HSK[0x16bbe20]: Initializing internal [read] cipher sessions

hello: 64 REC[0x16bbe20]: Expected Packet[0] Handshake(22) with length: 1

hello: 65 REC[0x16bbe20]: Received Packet[0] Handshake(22) with length: 32

hello: 66 REC[0x16bbe20]: Decrypted Packet[0] Handshake(22) with length: 16

hello: 49 HSK[0x16bbe20]: FINISHED was received [16 bytes]

gnutls: handshake: handshaking
hello: 62 HSK[0x16bbe20]: Keeping ciphersuite: DHE_RSA_AES_128_CBC_SHA1

hello: 67 HSK[0x16bbe20]: Keeping ciphersuite: DHE_RSA_CAMELLIA_128_CBC_SHA1

hello: 62 HSK[0x16bbe20]: Keeping ciphersuite: DHE_RSA_AES_256_CBC_SHA1

hello: 67 HSK[0x16bbe20]: Keeping ciphersuite: DHE_RSA_CAMELLIA_256_CBC_SHA1

hello: 63 HSK[0x16bbe20]: Keeping ciphersuite: DHE_RSA_3DES_EDE_CBC_SHA1

hello: 62 HSK[0x16bbe20]: Keeping ciphersuite: DHE_DSS_AES_128_CBC_SHA1

hello: 67 HSK[0x16bbe20]: Keeping ciphersuite: DHE_DSS_CAMELLIA_128_CBC_SHA1

hello: 62 HSK[0x16bbe20]: Keeping ciphersuite: DHE_DSS_AES_256_CBC_SHA1

hello: 67 HSK[0x16bbe20]: Keeping ciphersuite: DHE_DSS_CAMELLIA_256_CBC_SHA1

hello: 63 HSK[0x16bbe20]: Keeping ciphersuite: DHE_DSS_3DES_EDE_CBC_SHA1

hello: 58 HSK[0x16bbe20]: Keeping ciphersuite: DHE_DSS_ARCFOUR_SHA1

hello: 67 HSK[0x16bbe20]: Removing ciphersuite: DHE_PSK_SHA_AES_128_CBC_SHA1

hello: 67 HSK[0x16bbe20]: Removing ciphersuite: DHE_PSK_SHA_AES_256_CBC_SHA1

hello: 68 HSK[0x16bbe20]: Removing ciphersuite: DHE_PSK_SHA_3DES_EDE_CBC_SHA1

hello: 63 HSK[0x16bbe20]: Removing ciphersuite: DHE_PSK_SHA_ARCFOUR_SHA1

hello: 67 HSK[0x16bbe20]: Removing ciphersuite: SRP_SHA_RSA_AES_128_CBC_SHA1

hello: 67 HSK[0x16bbe20]: Removing ciphersuite: SRP_SHA_RSA_AES_256_CBC_SHA1

hello: 68 HSK[0x16bbe20]: Removing ciphersuite: SRP_SHA_RSA_3DES_EDE_CBC_SHA1

hello: 67 HSK[0x16bbe20]: Removing ciphersuite: SRP_SHA_DSS_AES_128_CBC_SHA1

hello: 67 HSK[0x16bbe20]: Removing ciphersuite: SRP_SHA_DSS_AES_256_CBC_SHA1

hello: 68 HSK[0x16bbe20]: Removing ciphersuite: SRP_SHA_DSS_3DES_EDE_CBC_SHA1

hello: 58 HSK[0x16bbe20]: Keeping ciphersuite: RSA_AES_128_CBC_SHA1

hello: 63 HSK[0x16bbe20]: Keeping ciphersuite: RSA_CAMELLIA_128_CBC_SHA1

hello: 58 HSK[0x16bbe20]: Keeping ciphersuite: RSA_AES_256_CBC_SHA1

hello: 63 HSK[0x16bbe20]: Keeping ciphersuite: RSA_CAMELLIA_256_CBC_SHA1

hello: 59 HSK[0x16bbe20]: Keeping ciphersuite: RSA_3DES_EDE_CBC_SHA1

hello: 54 HSK[0x16bbe20]: Keeping ciphersuite: RSA_ARCFOUR_SHA1

hello: 53 HSK[0x16bbe20]: Keeping ciphersuite: RSA_ARCFOUR_MD5

hello: 63 HSK[0x16bbe20]: Removing ciphersuite: PSK_SHA_AES_128_CBC_SHA1

hello: 63 HSK[0x16bbe20]: Removing ciphersuite: PSK_SHA_AES_256_CBC_SHA1

hello: 64 HSK[0x16bbe20]: Removing ciphersuite: PSK_SHA_3DES_EDE_CBC_SHA1

hello: 59 HSK[0x16bbe20]: Removing ciphersuite: PSK_SHA_ARCFOUR_SHA1

hello: 63 HSK[0x16bbe20]: Removing ciphersuite: SRP_SHA_AES_128_CBC_SHA1

hello: 63 HSK[0x16bbe20]: Removing ciphersuite: SRP_SHA_AES_256_CBC_SHA1

hello: 64 HSK[0x16bbe20]: Removing ciphersuite: SRP_SHA_3DES_EDE_CBC_SHA1

hello: 44 EXT[0x16bbe20]: Sending extension CERT_TYPE

hello: 49 HSK[0x16bbe20]: CLIENT HELLO was send [88 bytes]

hello: 64 REC[0x16bbe20]: Sending Packet[1] Handshake(22) with length: 88

hello: 62 REC[0x16bbe20]: Sent Packet[2] Handshake(22) with length: 109

hello: 64 REC[0x16bbe20]: Expected Packet[1] Handshake(22) with length: 1

hello: 72 REC[0x16bbe20]: Received Packet[1] Application Data(23) with length: 
84

hello: 73 REC[0x16bbe20]: Decrypted Packet[1] Application Data(23) with length: 
68

hello: 28 ASSERT: gnutls_record.c:735

hello: 29 ASSERT: gnutls_record.c:1048

hello: 30 ASSERT: gnutls_buffers.c:1032

hello: 32 ASSERT: gnutls_handshake.c:1045

hello: 32 ASSERT: gnutls_handshake.c:2364



I have no idea what this means, though.  :-)


-- 
(domestic pets only, the antidote for overdose, milk.)
  address@hidden * Lars Magne Ingebrigtsen