[gnutls-devel] GnuTLS | Bug Connecting to a TLS1.3 Only Server (#1637)

[Read-only notification of GnuTLS library development activities]

Alicja Kario (@mention me if you need reply) commented: https://gitlab.com/gnutls/gnutls/-/issues/1637#note_2284756094


It looks to me like the server is buggy: in the log.txt case it asks for a X25519 key share in the HelloRetryRequest, the gnutls provides it, and then the server rejects the connection with illegal_parameter

in the log-192.txt case the server picks the Secp384r1 key share and continues with that.

It looks like it has a buggy HRR implementation.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1637#note_2284756094
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20250107/033e37e4/attachment.html>