[gnutls-dev] Re: Bug not fixed in gnutls12

[Matthias Urlichs]

[ Debian bug: http://bugs.debian.org/336456 ]

Ian Abel:
> This bug is not fixed in gnutls12. The problem line is 
> lib/gnutls_kx.c:531, the code assumes that if _gnutls_recv_handshake 
> returns a negative number then the client didn't provide a certificate.
> It then runs a gnutls_assert sets the errr to GNUTLS_E_NO_CERTIFICATE and 
> propagates the error back to the caller of gnutls_handshake().
> 
> Despite the fact that _gnutls_recv_handshake returns GNUTLS_E_AGAIN if the 
> socket is non-blocking.
> 
Forwarding to the gnutls mailing list.

-- 
Matthias Urlichs   |   {M:U} IT Design @ m-u-it.de   |  smurf at smurf.noris.de
Disclaimer: The quote was selected randomly. Really. | http://smurf.noris.de
 - -
"The true contrast between science and myth is more nearly touched
 when we say that science alone is capable of verification."
  [George Santayana (1863-1952), "The Life of Reason" (1905-1906)]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: </pipermail/attachments/20051111/2c2e3a8f/attachment.pgp>