Bug#499945: Segfault in asn1_get_tag_der().

Kurt Roeckx kurt at roeckx.be
Wed Sep 24 17:04:53 UTC 2008


On Wed, Sep 24, 2008 at 12:07:09PM +0200, Simon Josefsson wrote:
> Kurt Roeckx <kurt at roeckx.be> writes:
> 
> > When I run "lynx https://acrobat.com", I end up with a segfault.  The
> > backtrace looks like:
> 
> The server seems somewhat broken, I can't connect using 'gnutls-cli'
> unless I force SSL3.0, and even then I just get a lot of Java JSP errors
> back from the server, and then it shuts down the connection without
> sending a TLS shutdown alert.

I can perfectly use it with openssl s_client using TLS1.0 and SSL3.  Both
produce the same output that looks like a normal http reply.  But it's
also showing an "read:errno=0" on stder for both.  I think it's still
expecting 5 bytes.

When using gnutls-cli with TLS the connection already gets dropped after
the first thing I send, even if I need to send something else before the
web server is supposed to reply.  So I think the other end atleast thinks
there is some protocol error and closes the connection.

When using gnutls-cli with SSL3 I get the same output as openssl's
s_client.


Kurt






More information about the Pkg-gnutls-maint mailing list