[Pkg-gnutls-maint] Bug#386530: [PATCH] gnutls-cli -t <timeout>
Robert Millan [ackstorm]
robert.millan at ackstorm.es
Mon May 28 17:19:03 UTC 2007
On Mon, May 28, 2007 at 10:23:14AM +0200, Robert Millan [ackstorm] wrote:
> On Sun, May 27, 2007 at 04:10:28PM +0200, Simon Josefsson wrote:
> >
> > However, I'm not convinced this is the right fix. I believe the servers
> > are buggy here, and changing gnutls seems the wrong response.
> >
> > What we may want to do is to improve the behaviour when we encounter a
> > buggy server, which may include some kind of timeout or similar.
> > However, if the server closed the connection, I think it should be
> > possible to detect this, and then we can print a message.
>
> I'm working on this atm. I have almost completed a patch that implements this
> timeout option (will send it RSN).
>
> > To work on this, I need a way to reproduce it though. Do you know of a
> > server that exhibit this behaviour that we can use?
>
> This works: while sudo nc -lp 443 ; do true ; done
>
> But please wait a day or two for my patch.
Here is it. The SIGALRM feature was getting into the way, so I moved it to
SIGHUP, which is more consistent with existing practice.
Works for dumb netcat-like servers, but is also useful for normal servers when
you want to gather information about certificates without starting an HTTP
session.
--
Robert Millan
ACK STORM, S.L. - http://www.ackstorm.es
-------------- next part --------------
A non-text attachment was scrubbed...
Name: timeout.diff
Type: text/x-diff
Size: 5310 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20070528/054edc32/attachment.diff
More information about the Pkg-gnutls-maint
mailing list