NULL cipher suites broken in gnutls 3.0.5 ?

Ludovic Courtès ludo at gnu.org
Sat Nov 5 01:02:35 CET 2011


Hello,

Nikos Mavrogiannopoulos <nmav at gnutls.org> skribis:

> On 11/04/2011 01:59 AM, Fabrice Gautier wrote:
>> Hi,
>> I get decryption error when using NULL-MD5 or NULL-SHA1 cipher suites
>> when using gnutls-serv, and connecting with a openssl client.
>
> Hello,
>  Thanks for reporting that. It seems the AEAD ciphers addition has
> broken the NULL cipher. I've committed a fix in the repository.

Would be nice to add Fabrice’s example as a test case so the bug can be
caught when it shows up again.

Thanks,
Ludo’.





More information about the Gnutls-help mailing list