[Help-gnutls] help troubleshooting "TLS packet with unexpected length was received" error

[Brad Fritz]

I am having a GnuTLS connection problem that I could use some help
troubleshooting.

When using the Debian pycurl package compiled against GnuTLS to
connect to api.smugmug.com (which uses a GoDaddy wildcard cert), I get
the error:

  GnuTLS recv error (-9): A TLS packet with unexpected length was
  received.

I am able to reproduce the problem using gnutls-cli v2.6.4 built from
source:

  ./src/gnutls-cli -d 4711 --x509cafile 
/usr/share/ca-certificates/mozilla/ValiCert_Class_2_VA.crt api.smugmug.com

  [.. inline snip, output from "-d 4711" attached ..]

  - Peer's certificate is trusted
  - Version: TLS1.0
  - Key Exchange: RSA
  - Cipher: 3DES-CBC
  - MAC: SHA1
  - Compression: NULL
  - Handshake was completed

  - Simple Client Mode:

  GET / HTTP/1.0
  *** Fatal error: A TLS packet with unexpected length was received.
  *** Server has terminated the connection abnormally.

If I use OpenSSL's s_client[1], I get the expected response from the
web server.

I am not sure how to interpret the debug output or what to try next.
Any help would be appreciated.  Thank you.

--Brad

[1] using the command "openssl s_client -connect api.smugmug.com:443"

gnutls_unexpected_length.txt
Description: Text document

signature.asc
Description: Digital signature