Re: Emacs core TLS support

[Lars Magne Ingebrigtsen]

Here's the entire trace from the connection:

HSK[0x1f927e0]: Keeping ciphersuite: DHE_RSA_AES_128_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_RSA_CAMELLIA_128_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_RSA_AES_256_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_RSA_CAMELLIA_256_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_RSA_3DES_EDE_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_DSS_AES_128_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_DSS_CAMELLIA_128_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_DSS_AES_256_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_DSS_CAMELLIA_256_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_DSS_3DES_EDE_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_DSS_ARCFOUR_SHA1
HSK[0x1f927e0]: Removing ciphersuite: DHE_PSK_SHA_AES_128_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: DHE_PSK_SHA_AES_256_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: DHE_PSK_SHA_3DES_EDE_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: DHE_PSK_SHA_ARCFOUR_SHA1
HSK[0x1f927e0]: Removing ciphersuite: SRP_SHA_RSA_AES_128_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: SRP_SHA_RSA_AES_256_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: SRP_SHA_RSA_3DES_EDE_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: SRP_SHA_DSS_AES_128_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: SRP_SHA_DSS_AES_256_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: SRP_SHA_DSS_3DES_EDE_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: RSA_AES_128_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: RSA_CAMELLIA_128_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: RSA_AES_256_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: RSA_CAMELLIA_256_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: RSA_3DES_EDE_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: RSA_ARCFOUR_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: RSA_ARCFOUR_MD5
HSK[0x1f927e0]: Removing ciphersuite: PSK_SHA_AES_128_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: PSK_SHA_AES_256_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: PSK_SHA_3DES_EDE_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: PSK_SHA_ARCFOUR_SHA1
HSK[0x1f927e0]: Removing ciphersuite: SRP_SHA_AES_128_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: SRP_SHA_AES_256_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: SRP_SHA_3DES_EDE_CBC_SHA1
EXT[0x1f927e0]: Sending extension CERT_TYPE
HSK[0x1f927e0]: CLIENT HELLO was send [88 bytes]
REC[0x1f927e0]: Sending Packet[0] Handshake(22) with length: 88
ASSERT: gnutls_cipher.c:204
REC[0x1f927e0]: Sent Packet[1] Handshake(22) with length: 93
REC[0x1f927e0]: Expected Packet[0] Handshake(22) with length: 1
REC[0x1f927e0]: Received Packet[0] Handshake(22) with length: 74
ASSERT: gnutls_cipher.c:204
REC[0x1f927e0]: Decrypted Packet[0] Handshake(22) with length: 74
HSK[0x1f927e0]: SERVER HELLO was received [74 bytes]
HSK[0x1f927e0]: Server's version: 3.1
HSK[0x1f927e0]: SessionID length: 32
HSK[0x1f927e0]: SessionID: 
f61b04980923171cfe2002e2a955cc198d4910ba1e4ebacbfc69840d8c4a9117
HSK[0x1f927e0]: Selected cipher suite: DHE_RSA_AES_128_CBC_SHA1
ASSERT: gnutls_extensions.c:124
REC[0x1f927e0]: Expected Packet[1] Handshake(22) with length: 1
REC[0x1f927e0]: Received Packet[1] Handshake(22) with length: 822
ASSERT: gnutls_cipher.c:204
REC[0x1f927e0]: Decrypted Packet[1] Handshake(22) with length: 822
HSK[0x1f927e0]: CERTIFICATE was received [822 bytes]
REC[0x1f927e0]: Expected Packet[2] Handshake(22) with length: 1
REC[0x1f927e0]: Received Packet[2] Handshake(22) with length: 397
ASSERT: gnutls_cipher.c:204
REC[0x1f927e0]: Decrypted Packet[2] Handshake(22) with length: 397
HSK[0x1f927e0]: SERVER KEY EXCHANGE was received [397 bytes]
REC[0x1f927e0]: Expected Packet[3] Handshake(22) with length: 1
REC[0x1f927e0]: Received Packet[3] Handshake(22) with length: 4
ASSERT: gnutls_cipher.c:204
REC[0x1f927e0]: Decrypted Packet[3] Handshake(22) with length: 4
HSK[0x1f927e0]: SERVER HELLO DONE was received [4 bytes]
ASSERT: gnutls_handshake.c:1123
HSK[0x1f927e0]: CLIENT KEY EXCHANGE was send [134 bytes]
REC[0x1f927e0]: Sending Packet[1] Handshake(22) with length: 134
ASSERT: gnutls_cipher.c:204
REC[0x1f927e0]: Sent Packet[2] Handshake(22) with length: 139
REC[0x1f927e0]: Sent ChangeCipherSpec
REC[0x1f927e0]: Sending Packet[2] Change Cipher Spec(20) with length: 1
ASSERT: gnutls_cipher.c:204
REC[0x1f927e0]: Sent Packet[3] Change Cipher Spec(20) with length: 6
 INT: PREMASTER SECRET[128]: 
b6e5db84294a9a5baaee9bef86ffef5291ddf3c05f89499a8886daf08efa56375c51b18d8d77d0f2eec4c15f45dfefb4c5e0f889f7b657335ac597d38250eda9a2aba41f308679516096b2e66123e6d88ba404f3ce2ffc661fecce32375492c2a40901f395b3589c4bbae52eb6c5c7c760d70b7709baffb937ee1873af205cbc
INT: CLIENT RANDOM[32]: 
4ca0a5bee2a9c7b97625a749ccc5517991d2aab2e2453a3e0c4f32276c35fcc0
INT: SERVER RANDOM[32]: 
4ca0a5bef00fb375c5e1ecc418f64566f621c6dd620161c146650ef50ad9c2ac
 INT: MASTER SECRET: 
408e7621cb6a64815e6c24443d253f1449c74d48eb8be7a24bebe90a886aa1eab4683a3c91123d2ea02c0a8076914503
INT: KEY BLOCK[104]: 
7696db01048a00a561eb42326691f07edaa83e3a8b4aee76e0d8aaacd568dcc2
INT: CLIENT WRITE KEY [16]: d8f1e68d677bfea28200e5c6b491f710
INT: SERVER WRITE KEY [16]: 9740dbee6da2a243eb7d35e856c4fa93
HSK[0x1f927e0]: Cipher Suite: DHE_RSA_AES_128_CBC_SHA1
HSK[0x1f927e0]: Initializing internal [write] cipher sessions
HSK[0x1f927e0]: FINISHED was send [16 bytes]
REC[0x1f927e0]: Sending Packet[0] Handshake(22) with length: 16
REC[0x1f927e0]: Sent Packet[1] Handshake(22) with length: 277
REC[0x1f927e0]: Expected Packet[4] Change Cipher Spec(20) with length: 1
REC[0x1f927e0]: Received Packet[4] Change Cipher Spec(20) with length: 1
ASSERT: gnutls_cipher.c:204
REC[0x1f927e0]: ChangeCipherSpec Packet was received
HSK[0x1f927e0]: Cipher Suite: DHE_RSA_AES_128_CBC_SHA1
HSK[0x1f927e0]: Initializing internal [read] cipher sessions
REC[0x1f927e0]: Expected Packet[0] Handshake(22) with length: 1
REC[0x1f927e0]: Received Packet[0] Handshake(22) with length: 48
REC[0x1f927e0]: Decrypted Packet[0] Handshake(22) with length: 16
HSK[0x1f927e0]: FINISHED was received [16 bytes]
HSK[0x1f927e0]: Keeping ciphersuite: DHE_RSA_AES_128_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_RSA_CAMELLIA_128_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_RSA_AES_256_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_RSA_CAMELLIA_256_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_RSA_3DES_EDE_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_DSS_AES_128_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_DSS_CAMELLIA_128_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_DSS_AES_256_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_DSS_CAMELLIA_256_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_DSS_3DES_EDE_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: DHE_DSS_ARCFOUR_SHA1
HSK[0x1f927e0]: Removing ciphersuite: DHE_PSK_SHA_AES_128_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: DHE_PSK_SHA_AES_256_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: DHE_PSK_SHA_3DES_EDE_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: DHE_PSK_SHA_ARCFOUR_SHA1
HSK[0x1f927e0]: Removing ciphersuite: SRP_SHA_RSA_AES_128_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: SRP_SHA_RSA_AES_256_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: SRP_SHA_RSA_3DES_EDE_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: SRP_SHA_DSS_AES_128_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: SRP_SHA_DSS_AES_256_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: SRP_SHA_DSS_3DES_EDE_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: RSA_AES_128_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: RSA_CAMELLIA_128_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: RSA_AES_256_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: RSA_CAMELLIA_256_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: RSA_3DES_EDE_CBC_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: RSA_ARCFOUR_SHA1
HSK[0x1f927e0]: Keeping ciphersuite: RSA_ARCFOUR_MD5
HSK[0x1f927e0]: Removing ciphersuite: PSK_SHA_AES_128_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: PSK_SHA_AES_256_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: PSK_SHA_3DES_EDE_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: PSK_SHA_ARCFOUR_SHA1
HSK[0x1f927e0]: Removing ciphersuite: SRP_SHA_AES_128_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: SRP_SHA_AES_256_CBC_SHA1
HSK[0x1f927e0]: Removing ciphersuite: SRP_SHA_3DES_EDE_CBC_SHA1
EXT[0x1f927e0]: Sending extension CERT_TYPE
HSK[0x1f927e0]: CLIENT HELLO was send [88 bytes]
REC[0x1f927e0]: Sending Packet[1] Handshake(22) with length: 88
REC[0x1f927e0]: Sent Packet[2] Handshake(22) with length: 149
REC[0x1f927e0]: Expected Packet[1] Handshake(22) with length: 1
REC[0x1f927e0]: Received Packet[1] Application Data(23) with length: 48
REC[0x1f927e0]: Decrypted Packet[1] Application Data(23) with length: 21
ASSERT: gnutls_record.c:735
ASSERT: gnutls_record.c:1048
ASSERT: gnutls_buffers.c:1032
ASSERT: gnutls_handshake.c:1045
ASSERT: gnutls_handshake.c:2364

-- 
(domestic pets only, the antidote for overdose, milk.)
  address@hidden * Lars Magne Ingebrigtsen