Re: confirmation that debian #480041 is a gnutls problem, and steps to reproduce

[Nikos Mavrogiannopoulos]

Daniel Kahn Gillmor wrote:
> OK, i'm now sure that debian #480041 is a gnutls problem, and not just
> due to something wacky in libneon (though there may be libneon bits as
> well).  Here's a way to duplicate the problem without using libneon.
[...]
> - Simple Client Mode:
> 
> *** Non fatal error: Rehandshake was requested by the peer.
> *** Fatal error: A TLS fatal alert has been received.
> *** Received alert [10]: Unexpected message
> *** Server has terminated the connection abnormally.
> ---------------------------------

Hello, this does not seem to be a gnutls error. The server merely asks
for renegotiation, gnutls-cli ignores it (legal behavior) and server
does not like it thus sends a fatal alert. However which version of
gnutls-cli is that? Can you try with the latest?

For neon to solve this, it has to perform a handshake after the
rehandshake request has been required.

regards,
Nikos