Re: ssl connection issues

[Nikos Mavrogiannopoulos]

On Wed, Sep 29, 2010 at 3:15 PM, Michael Blumenkrantz <address@hidden> wrote:

> I have read through the examples and tested using my code.  It functions fine,
> though I took your advice and migrated to newer priority strings.  It seems
> that I may have found a gnutls bug in handshaking, however, though I will
> reserve judgment on that until I have investigated further.  The bug seems to
> be if you are doing async connections, you cannot call gnutls_handshake with a
> very small amount of data in the buffer or else the handshake will fail with 
> an
> error.  Specifically, I find this occurring while receiving data (as a client)
> for a session ticket.
> I have so far found this to be the case by briefly pausing execution of my
> program just before the gnutls_handshake() call where it would be reading from
> the file descriptor so that more data can accumulate, and then continuing.  
> The
> handshake completes as expected, where it would have failed if running at
> normal speed.

Where does handshake fail? (if you use level 2 debugging you get a
nice backtrace of the
failure).

> Is it possible that there is a bug like this?

You never know, although I think gnutls is being used in async mode quite often.

regards,
Nikos