On Fri 2008-11-21 13:54:37 -0500, Nikos Mavrogiannopoulos wrote: > Could you first send me a capture to be used with wireshark so i can > check precisely what is happening there (gnutls-cli) and rule out any > gnutls issue?
Attached is a pcap file, and the test key and certificate used by the server during the communication. The client had no certificate. wireshark tells me that the TCP checksums of most packets in the packet capture are wrong; i don't know why that is, nor do i think it's particularly relevant, given that this was all done across the loopback interface. This packet capture was done with gnutls-cli 2.6.2-1 and with libgnutls26 from the same version. Hope this is helpful, --dkg
480041.pcap
Description: packet capture
-----BEGIN RSA PRIVATE KEY----- MIICXQIBAAKBgQC6p8rW06BcHKzKVKtvOeX9aRNw85vSPU5ga2Zt04imwyMeKVII DcklUuiMN+rNfbBh9+0Sn/v6jI+x4XXfAR/1o8G5klA91agOs4qpZWo94km4QpMw 2cT5fw13ImxQNqxY2uvNnhrhROhFj6JLCBMxGRfY+7nkVgT9hN+/0/RRXwIDAQAB AoGAb/yr3igqVhl+MgaKtLjwHBIm7+W433KYy5Cka9A2dJcvQrFX3i0nOZV8oGQM JC383Up6mmoSLEiZDghPR/TMzvThuxfgVXVo5suC/vpeLi33qexsq2MHhZVrbx0D Vq78Kbm+b5blI2moCD1wAWixNgKWA8S3Ejt5kjT/qvqJBUECQQDrd0IJ6BjdRAqa 3M/g0X+rWRh7Flv71zA6dacrzVfAJNwwT++38sjimCnvuozsm1M4Y9GcmHDXXC2I OXVLHx9NAkEAyu7ZSWnGwyuHKrBiumtffwpNj9FDZOpYNdihFWM0WJ0ZCmSYbzb6 BqwUFrXngryTbEQbnXVeH4bQ1GAUge51WwJBAMYMuhQBDyDUwSK+hW6wZ3Tk7I1j Ih0yQxN4sBJMlfk8R6OvKI8M+2Bz4hoMS8obXyT3+G+BXLAXjQieY4S6+aUCQQCj ivnyABz/DQVRkfT+56l+aH85eBwoJ/QO8RZgdiKph3G2vntapaO53NQTuWVqJy9o ATuAGiZQogWKIiRk0hghAkBGg8wWbbHvhAfTQFwW7Y7PphAyNC/fo5h/M3QrXKf6 LcoUoxkjj/5cUXFMTt3CnHbECgS0TP2clvCTQ/A+yE1C -----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE----- MIICMzCCAZygAwIBAgIJALvahxADjKFkMA0GCSqGSIb3DQEBBQUAMBwxGjAYBgNV BAMTEWZ1YmFyLmV4YW1wbGUub3JnMB4XDTA4MTEyMTE2NDk1MloXDTA4MTIyMTE2 NDk1MlowHDEaMBgGA1UEAxMRZnViYXIuZXhhbXBsZS5vcmcwgZ8wDQYJKoZIhvcN AQEBBQADgY0AMIGJAoGBALqnytbToFwcrMpUq2855f1pE3Dzm9I9TmBrZm3TiKbD Ix4pUggNySVS6Iw36s19sGH37RKf+/qMj7Hhdd8BH/WjwbmSUD3VqA6ziqllaj3i SbhCkzDZxPl/DXcibFA2rFja682eGuFE6EWPoksIEzEZF9j7ueRWBP2E37/T9FFf AgMBAAGjfTB7MB0GA1UdDgQWBBRkt2D3pZpIypyYLzxXZ9+7SWApmzBMBgNVHSME RTBDgBRkt2D3pZpIypyYLzxXZ9+7SWApm6EgpB4wHDEaMBgGA1UEAxMRZnViYXIu ZXhhbXBsZS5vcmeCCQC72ocQA4yhZDAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEB BQUAA4GBAJxKg9EfCt8xv2tZYeSoYW8KfRcWxK7l77mcBmkjQg0Ov/vHQ+fQ7xFP EQHtsyNMByhIJ01Ycbn8DFPW0kJQrGWpXm9wm6aWFZtuHplrqO9gzSBumCh0zf6g REWbrEqUDMa00zchkvUZmc37X4G0mzCh6CnJnueOkngo2pzgcSHI -----END CERTIFICATE-----
pgp5ri2p9Tz8Z.pgp
Description: PGP signature