[Help-gnutls] Sending a client certificate

[Martin Lambers]

On Sat, 05. Feb 2005, 19:02:34 +0100, Nikos Mavrogiannopoulos wrote:
> Does the server request a certificate? If it doesn't then no matter if
> you specify one, it will not be used. Otherwise please attach the
> output of ssldump, or the debug output of level 3.

This is the level 3 debug output:

GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: RSA_AES_256_CBC_SHA
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: RSA_AES_256_CBC_RMD
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: RSA_AES_128_CBC_SHA
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: RSA_AES_128_CBC_RMD
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: RSA_3DES_EDE_CBC_SHA
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: RSA_3DES_EDE_CBC_RMD
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: RSA_ARCFOUR_SHA
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: RSA_ARCFOUR_MD5
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: DHE_DSS_AES_256_CBC_SHA
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: DHE_DSS_AES_256_CBC_RMD
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: DHE_DSS_AES_128_CBC_SHA
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: DHE_DSS_AES_128_CBC_RMD
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: DHE_DSS_3DES_EDE_CBC_SHA
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: DHE_DSS_3DES_EDE_CBC_RMD
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: DHE_DSS_ARCFOUR_SHA
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: DHE_RSA_AES_256_CBC_SHA
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: DHE_RSA_AES_256_CBC_RMD
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: DHE_RSA_AES_128_CBC_SHA
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: DHE_RSA_AES_128_CBC_RMD
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: DHE_RSA_3DES_EDE_CBC_SHA
GNUTLS DEBUG 3: HSK[8076ad0]: Keeping ciphersuite: DHE_RSA_3DES_EDE_CBC_RMD
GNUTLS DEBUG 3: HSK[8076ad0]: CLIENT HELLO was send [85 bytes]
GNUTLS DEBUG 3: HSK[8076ad0]: SERVER HELLO was received [74 bytes]
GNUTLS DEBUG 3: HSK[8076ad0]: Server's version: 3.1
GNUTLS DEBUG 3: HSK[8076ad0]: SessionID length: 32
GNUTLS DEBUG 3: HSK[8076ad0]: SessionID: a16c0704a2322071bf83669cbffb9f3bfdbfea6f5f34478669edae4468b3d09c
GNUTLS DEBUG 3: HSK[8076ad0]: Selected cipher suite: RSA_AES_256_CBC_SHA
GNUTLS DEBUG 2: ASSERT: gnutls_extensions.c:143
GNUTLS DEBUG 3: HSK[8076ad0]: CERTIFICATE was received [1454 bytes]
GNUTLS DEBUG 3: HSK[8076ad0]: CERTIFICATE REQUEST was received [137 bytes]
GNUTLS DEBUG 2: ASSERT: auth_cert.c:198
GNUTLS DEBUG 3: HSK[8076ad0]: SERVER HELLO DONE was received [4 bytes]
GNUTLS DEBUG 3: HSK[8076ad0]: CERTIFICATE was send [7 bytes]
GNUTLS DEBUG 3: HSK[8076ad0]: CLIENT KEY EXCHANGE was send [134 bytes]
GNUTLS DEBUG 3: REC[8076ad0]: Sent ChangeCipherSpec
GNUTLS DEBUG 3: HSK[8076ad0]: Cipher Suite: RSA_AES_256_CBC_SHA
GNUTLS DEBUG 3: HSK[8076ad0]: Initializing internal [write] cipher sessions
GNUTLS DEBUG 3: HSK[8076ad0]: FINISHED was send [16 bytes]
GNUTLS DEBUG 3: HSK[8076ad0]: Cipher Suite: RSA_AES_256_CBC_SHA
GNUTLS DEBUG 3: HSK[8076ad0]: Initializing internal [read] cipher sessions
GNUTLS DEBUG 3: HSK[8076ad0]: FINISHED was received [16 bytes]
GNUTLS DEBUG 2: ASSERT: dn.c:426
GNUTLS DEBUG 2: ASSERT: dn.c:426
GNUTLS DEBUG 2: ASSERT: dn.c:426
GNUTLS DEBUG 2: ASSERT: dn.c:358
GNUTLS DEBUG 2: ASSERT: dn.c:468
GNUTLS DEBUG 2: ASSERT: dn.c:426
GNUTLS DEBUG 2: ASSERT: dn.c:426
GNUTLS DEBUG 2: ASSERT: dn.c:426
GNUTLS DEBUG 2: ASSERT: dn.c:426
GNUTLS DEBUG 2: ASSERT: dn.c:358
GNUTLS DEBUG 2: ASSERT: dn.c:468
GNUTLS DEBUG 2: ASSERT: dn.c:426
GNUTLS DEBUG 2: ASSERT: dn.c:426
GNUTLS DEBUG 2: ASSERT: dn.c:426
GNUTLS DEBUG 2: ASSERT: verify.c:223
GNUTLS DEBUG 2: ASSERT: verify.c:333
GNUTLS DEBUG 2: ASSERT: gnutls_buffers.c:503
GNUTLS DEBUG 2: ASSERT: gnutls_record.c:795