On Thu, Jun 28, 2007 at 01:15:33PM +0200, Marc Haber wrote: > On Wed, Jun 20, 2007 at 04:47:27PM +0100, Mark Adams wrote: > > When using gnutls-cli to connect to the client whilst running the > > gnutls-server command I get the following response > > > > - Peer's certificate issuer is unknown > > - Peer's certificate is NOT trusted > > - Version: TLS 1.0 > > - Key Exchange: DHE RSA > > - Cipher: AES 256 CBC > > - MAC: SHA > > - Compression: DEFLATE > > - Handshake was completed > > > > - Simple Client Mode: > > > > When you type things in the client, do they show up in the server and > vice versa? Which command lines do you use?
When I type "hello" in the client (for instance) I get "hello" back in the client. (see log below for server side reponses) When I type "hello" in the server, I get nothing back there, and nothing in the client. using gnutls-cli -p 5556 hostname Apologies for long log here but I did not want to miss anything out. Echo Server ready. Listening to port '5556'. |<4>| REC[547060]: Expected Packet[0] Handshake(22) with length: 1 |<4>| REC[547060]: Received Packet[0] Handshake(22) with length: 140 |<4>| REC[547060]: Decrypted Packet[0] Handshake(22) with length: 140 |<3>| HSK[547060]: CLIENT HELLO was received [140 bytes] |<3>| HSK[547060]: Client's version: 3.2 |<2>| ASSERT: gnutls_db.c:327 |<2>| ASSERT: gnutls_db.c:247 |<3>| HSK[547060]: Selected Compression Method: DEFLATE |<2>| EXT[547060]: Received extension 'CERT_TYPE' |<2>| EXT[547060]: Received extension 'SERVER_NAME' |<2>| ASSERT: gnutls_handshake.c:2674 |<3>| HSK[547060]: Removing ciphersuite: ANON_DH_ARCFOUR_MD5 |<2>| ASSERT: gnutls_handshake.c:2674 |<3>| HSK[547060]: Removing ciphersuite: ANON_DH_3DES_EDE_CBC_SHA1 |<2>| ASSERT: gnutls_handshake.c:2674 |<3>| HSK[547060]: Removing ciphersuite: ANON_DH_AES_128_CBC_SHA1 |<3>| HSK[547060]: Removing ciphersuite: PSK_SHA_ARCFOUR_SHA1 |<3>| HSK[547060]: Removing ciphersuite: PSK_SHA_3DES_EDE_CBC_SHA1 |<3>| HSK[547060]: Removing ciphersuite: PSK_SHA_AES_128_CBC_SHA1 |<3>| HSK[547060]: Removing ciphersuite: DHE_PSK_SHA_ARCFOUR_SHA1 |<3>| HSK[547060]: Removing ciphersuite: DHE_PSK_SHA_3DES_EDE_CBC_SHA1 |<3>| HSK[547060]: Removing ciphersuite: DHE_PSK_SHA_AES_128_CBC_SHA1 |<3>| HSK[547060]: Removing ciphersuite: SRP_SHA_3DES_EDE_CBC_SHA1 |<3>| HSK[547060]: Removing ciphersuite: SRP_SHA_AES_128_CBC_SHA1 |<3>| HSK[547060]: Removing ciphersuite: SRP_SHA_DSS_3DES_EDE_CBC_SHA1 |<3>| HSK[547060]: Keeping ciphersuite: SRP_SHA_RSA_3DES_EDE_CBC_SHA1 |<3>| HSK[547060]: Removing ciphersuite: SRP_SHA_DSS_AES_128_CBC_SHA1 |<3>| HSK[547060]: Keeping ciphersuite: SRP_SHA_RSA_AES_128_CBC_SHA1 |<3>| HSK[547060]: Removing ciphersuite: DHE_DSS_ARCFOUR_SHA1 |<3>| HSK[547060]: Removing ciphersuite: DHE_DSS_3DES_EDE_CBC_SHA1 |<3>| HSK[547060]: Removing ciphersuite: DHE_DSS_AES_128_CBC_SHA1 |<2>| ASSERT: gnutls_handshake.c:2674 |<3>| HSK[547060]: Removing ciphersuite: DHE_RSA_3DES_EDE_CBC_SHA1 |<2>| ASSERT: gnutls_handshake.c:2674 |<3>| HSK[547060]: Removing ciphersuite: DHE_RSA_AES_128_CBC_SHA1 |<2>| ASSERT: gnutls_handshake.c:2664 |<3>| HSK[547060]: Removing ciphersuite: RSA_EXPORT_ARCFOUR_40_MD5 |<3>| HSK[547060]: Keeping ciphersuite: RSA_ARCFOUR_SHA1 |<3>| HSK[547060]: Keeping ciphersuite: RSA_ARCFOUR_MD5 |<3>| HSK[547060]: Keeping ciphersuite: RSA_3DES_EDE_CBC_SHA1 |<3>| HSK[547060]: Keeping ciphersuite: RSA_AES_128_CBC_SHA1 |<3>| HSK[547060]: Selected cipher suite: RSA_AES_128_CBC_SHA1 |<3>| HSK[547060]: SessionID: ca761ceecc5a61803da38f461c324b39ac67e0e3c91ccc242cc7cfbcd621fd68 |<3>| HSK[547060]: SERVER HELLO was send [74 bytes] |<4>| REC[547060]: Sending Packet[0] Handshake(22) with length: 74 |<4>| REC[547060]: Sent Packet[1] Handshake(22) with length: 79 |<4>| REC[547060]: Sent Packet[1] Handshake(22) with length: 79 |<3>| HSK[547060]: CERTIFICATE was send [1359 bytes] |<4>| REC[547060]: Sending Packet[1] Handshake(22) with length: 1359 |<4>| REC[547060]: Sent Packet[2] Handshake(22) with length: 1364 |<3>| HSK[547060]: CERTIFICATE REQUEST was send [9 bytes] |<4>| REC[547060]: Sending Packet[2] Handshake(22) with length: 9 |<4>| REC[547060]: Sent Packet[3] Handshake(22) with length: 14 |<3>| HSK[547060]: SERVER HELLO DONE was send [4 bytes] |<4>| REC[547060]: Sending Packet[3] Handshake(22) with length: 4 |<4>| REC[547060]: Sent Packet[4] Handshake(22) with length: 9 |<2>| ASSERT: gnutls_buffers.c:289 |<2>| ASSERT: gnutls_buffers.c:1087 |<2>| ASSERT: gnutls_handshake.c:949 |<4>| REC[547060]: Expected Packet[1] Handshake(22) with length: 1 |<4>| REC[547060]: Received Packet[1] Handshake(22) with length: 7 |<4>| REC[547060]: Decrypted Packet[1] Handshake(22) with length: 7 |<3>| HSK[547060]: CERTIFICATE was received [7 bytes] |<2>| ASSERT: auth_cert.c:882 |<2>| ASSERT: gnutls_buffers.c:289 |<2>| ASSERT: gnutls_buffers.c:1087 |<2>| ASSERT: gnutls_handshake.c:949 |<4>| REC[547060]: Expected Packet[2] Handshake(22) with length: 1 |<4>| REC[547060]: Received Packet[2] Handshake(22) with length: 134 |<4>| REC[547060]: Decrypted Packet[2] Handshake(22) with length: 134 |<3>| HSK[547060]: CLIENT KEY EXCHANGE was received [134 bytes] |<4>| REC[547060]: Expected Packet[3] Change Cipher Spec(20) with length: 1 |<4>| REC[547060]: Received Packet[3] Change Cipher Spec(20) with length: 1 |<4>| REC[547060]: ChangeCipherSpec Packet was received |<3>| HSK[547060]: Cipher Suite: RSA_AES_128_CBC_SHA1 |<3>| HSK[547060]: Initializing internal [read] cipher sessions |<4>| REC[547060]: Expected Packet[0] Handshake(22) with length: 1 |<4>| REC[547060]: Received Packet[0] Handshake(22) with length: 272 |<4>| REC[547060]: Decrypted Packet[0] Handshake(22) with length: 16 |<3>| HSK[547060]: FINISHED was received [16 bytes] |<3>| REC[547060]: Sent ChangeCipherSpec |<4>| REC[547060]: Sending Packet[4] Change Cipher Spec(20) with length: 1 |<4>| REC[547060]: Sent Packet[5] Change Cipher Spec(20) with length: 6 |<3>| HSK[547060]: Cipher Suite: RSA_AES_128_CBC_SHA1 |<3>| HSK[547060]: Initializing internal [write] cipher sessions |<3>| HSK[547060]: FINISHED was send [16 bytes] |<4>| REC[547060]: Sending Packet[0] Handshake(22) with length: 16 |<4>| REC[547060]: Sent Packet[1] Handshake(22) with length: 85 * connection from ::ffff:10.0.0.33, port 51960 - Given server name[1]: mail.myhost.net - Certificate type: X.509 No certificates found! - Peer did not send any certificate. - Version: TLS 1.1 - Key Exchange: RSA - Cipher: AES 128 CBC - MAC: SHA - Compression: DEFLATE |<2>| ASSERT: gnutls_buffers.c:289 |<4>| REC[547060]: Expected Packet[1] Application Data(23) with length: 1024 |<4>| REC[547060]: Received Packet[1] Application Data(23) with length: 208 |<4>| REC[547060]: Decrypted Packet[1] Application Data(23) with length: 6 |<4>| REC[547060]: Sending Packet[1] Application Data(23) with length: 6 |<4>| REC[547060]: Sent Packet[2] Application Data(23) with length: 181 |<4>| REC[547060]: Expected Packet[2] Application Data(23) with length: 1024 |<4>| REC[547060]: Received Packet[2] Application Data(23) with length: 96 |<4>| REC[547060]: Decrypted Packet[2] Application Data(23) with length: 12 |<4>| REC[547060]: Sending Packet[2] Application Data(23) with length: 12 |<4>| REC[547060]: Sent Packet[3] Application Data(23) with length: 165 > > Greetings > Marc > Regards, Mark -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]