Bug#426013: exim4-daemon-heavy Base64 decoding error

Thu Jun 28 12:06:36 UTC 2007

On Thu, Jun 28, 2007 at 01:15:33PM +0200, Marc Haber wrote:
> On Wed, Jun 20, 2007 at 04:47:27PM +0100, Mark Adams wrote:
> > When using gnutls-cli to connect to the client whilst running the
> > gnutls-server command I get the following response
> > 
> > - Peer's certificate issuer is unknown
> > - Peer's certificate is NOT trusted
> > - Version: TLS 1.0
> > - Key Exchange: DHE RSA
> > - Cipher: AES 256 CBC
> > - MAC: SHA
> > - Compression: DEFLATE
> > - Handshake was completed
> > 
> > - Simple Client Mode:
> > 
> 
> When you type things in the client, do they show up in the server and
> vice versa? Which command lines do you use?

When I type "hello" in the client (for instance) I get "hello" back in
the client. (see log below for server side reponses)

When I type "hello" in the server, I get nothing back there, and nothing
in the client.

using gnutls-cli -p 5556 hostname

Apologies for long log here but I did not want to miss anything out.

Echo Server ready. Listening to port '5556'.

|<4>| REC[547060]: Expected Packet[0] Handshake(22) with length: 1
|<4>| REC[547060]: Received Packet[0] Handshake(22) with length: 140
|<4>| REC[547060]: Decrypted Packet[0] Handshake(22) with length: 140
|<3>| HSK[547060]: CLIENT HELLO was received [140 bytes]
|<3>| HSK[547060]: Client's version: 3.2
|<2>| ASSERT: gnutls_db.c:327
|<2>| ASSERT: gnutls_db.c:247
|<3>| HSK[547060]: Selected Compression Method: DEFLATE
|<2>| EXT[547060]: Received extension 'CERT_TYPE'
|<2>| EXT[547060]: Received extension 'SERVER_NAME'
|<2>| ASSERT: gnutls_handshake.c:2674
|<3>| HSK[547060]: Removing ciphersuite: ANON_DH_ARCFOUR_MD5
|<2>| ASSERT: gnutls_handshake.c:2674
|<3>| HSK[547060]: Removing ciphersuite: ANON_DH_3DES_EDE_CBC_SHA1
|<2>| ASSERT: gnutls_handshake.c:2674
|<3>| HSK[547060]: Removing ciphersuite: ANON_DH_AES_128_CBC_SHA1
|<3>| HSK[547060]: Removing ciphersuite: PSK_SHA_ARCFOUR_SHA1
|<3>| HSK[547060]: Removing ciphersuite: PSK_SHA_3DES_EDE_CBC_SHA1
|<3>| HSK[547060]: Removing ciphersuite: PSK_SHA_AES_128_CBC_SHA1
|<3>| HSK[547060]: Removing ciphersuite: DHE_PSK_SHA_ARCFOUR_SHA1
|<3>| HSK[547060]: Removing ciphersuite: DHE_PSK_SHA_3DES_EDE_CBC_SHA1
|<3>| HSK[547060]: Removing ciphersuite: DHE_PSK_SHA_AES_128_CBC_SHA1
|<3>| HSK[547060]: Removing ciphersuite: SRP_SHA_3DES_EDE_CBC_SHA1
|<3>| HSK[547060]: Removing ciphersuite: SRP_SHA_AES_128_CBC_SHA1
|<3>| HSK[547060]: Removing ciphersuite: SRP_SHA_DSS_3DES_EDE_CBC_SHA1
|<3>| HSK[547060]: Keeping ciphersuite: SRP_SHA_RSA_3DES_EDE_CBC_SHA1
|<3>| HSK[547060]: Removing ciphersuite: SRP_SHA_DSS_AES_128_CBC_SHA1
|<3>| HSK[547060]: Keeping ciphersuite: SRP_SHA_RSA_AES_128_CBC_SHA1
|<3>| HSK[547060]: Removing ciphersuite: DHE_DSS_ARCFOUR_SHA1
|<3>| HSK[547060]: Removing ciphersuite: DHE_DSS_3DES_EDE_CBC_SHA1
|<3>| HSK[547060]: Removing ciphersuite: DHE_DSS_AES_128_CBC_SHA1
|<2>| ASSERT: gnutls_handshake.c:2674
|<3>| HSK[547060]: Removing ciphersuite: DHE_RSA_3DES_EDE_CBC_SHA1
|<2>| ASSERT: gnutls_handshake.c:2674
|<3>| HSK[547060]: Removing ciphersuite: DHE_RSA_AES_128_CBC_SHA1
|<2>| ASSERT: gnutls_handshake.c:2664
|<3>| HSK[547060]: Removing ciphersuite: RSA_EXPORT_ARCFOUR_40_MD5
|<3>| HSK[547060]: Keeping ciphersuite: RSA_ARCFOUR_SHA1
|<3>| HSK[547060]: Keeping ciphersuite: RSA_ARCFOUR_MD5
|<3>| HSK[547060]: Keeping ciphersuite: RSA_3DES_EDE_CBC_SHA1
|<3>| HSK[547060]: Keeping ciphersuite: RSA_AES_128_CBC_SHA1
|<3>| HSK[547060]: Selected cipher suite: RSA_AES_128_CBC_SHA1
|<3>| HSK[547060]: SessionID: ca761ceecc5a61803da38f461c324b39ac67e0e3c91ccc242cc7cfbcd621fd68
|<3>| HSK[547060]: SERVER HELLO was send [74 bytes]
|<4>| REC[547060]: Sending Packet[0] Handshake(22) with length: 74
|<4>| REC[547060]: Sent Packet[1] Handshake(22) with length: 79
|<4>| REC[547060]: Sent Packet[1] Handshake(22) with length: 79
|<3>| HSK[547060]: CERTIFICATE was send [1359 bytes]
|<4>| REC[547060]: Sending Packet[1] Handshake(22) with length: 1359
|<4>| REC[547060]: Sent Packet[2] Handshake(22) with length: 1364
|<3>| HSK[547060]: CERTIFICATE REQUEST was send [9 bytes]
|<4>| REC[547060]: Sending Packet[2] Handshake(22) with length: 9
|<4>| REC[547060]: Sent Packet[3] Handshake(22) with length: 14
|<3>| HSK[547060]: SERVER HELLO DONE was send [4 bytes]
|<4>| REC[547060]: Sending Packet[3] Handshake(22) with length: 4
|<4>| REC[547060]: Sent Packet[4] Handshake(22) with length: 9
|<2>| ASSERT: gnutls_buffers.c:289
|<2>| ASSERT: gnutls_buffers.c:1087
|<2>| ASSERT: gnutls_handshake.c:949
|<4>| REC[547060]: Expected Packet[1] Handshake(22) with length: 1
|<4>| REC[547060]: Received Packet[1] Handshake(22) with length: 7
|<4>| REC[547060]: Decrypted Packet[1] Handshake(22) with length: 7
|<3>| HSK[547060]: CERTIFICATE was received [7 bytes]
|<2>| ASSERT: auth_cert.c:882
|<2>| ASSERT: gnutls_buffers.c:289
|<2>| ASSERT: gnutls_buffers.c:1087
|<2>| ASSERT: gnutls_handshake.c:949
|<4>| REC[547060]: Expected Packet[2] Handshake(22) with length: 1
|<4>| REC[547060]: Received Packet[2] Handshake(22) with length: 134
|<4>| REC[547060]: Decrypted Packet[2] Handshake(22) with length: 134
|<3>| HSK[547060]: CLIENT KEY EXCHANGE was received [134 bytes]
|<4>| REC[547060]: Expected Packet[3] Change Cipher Spec(20) with length: 1
|<4>| REC[547060]: Received Packet[3] Change Cipher Spec(20) with length: 1
|<4>| REC[547060]: ChangeCipherSpec Packet was received
|<3>| HSK[547060]: Cipher Suite: RSA_AES_128_CBC_SHA1
|<3>| HSK[547060]: Initializing internal [read] cipher sessions
|<4>| REC[547060]: Expected Packet[0] Handshake(22) with length: 1
|<4>| REC[547060]: Received Packet[0] Handshake(22) with length: 272
|<4>| REC[547060]: Decrypted Packet[0] Handshake(22) with length: 16
|<3>| HSK[547060]: FINISHED was received [16 bytes]
|<3>| REC[547060]: Sent ChangeCipherSpec
|<4>| REC[547060]: Sending Packet[4] Change Cipher Spec(20) with length: 1
|<4>| REC[547060]: Sent Packet[5] Change Cipher Spec(20) with length: 6
|<3>| HSK[547060]: Cipher Suite: RSA_AES_128_CBC_SHA1
|<3>| HSK[547060]: Initializing internal [write] cipher sessions
|<3>| HSK[547060]: FINISHED was send [16 bytes]
|<4>| REC[547060]: Sending Packet[0] Handshake(22) with length: 16
|<4>| REC[547060]: Sent Packet[1] Handshake(22) with length: 85

* connection from ::ffff:10.0.0.33, port 51960
- Given server name[1]: mail.myhost.net
- Certificate type: X.509
No certificates found!

- Peer did not send any certificate.
- Version: TLS 1.1
- Key Exchange: RSA
- Cipher: AES 128 CBC
- MAC: SHA                             
- Compression: DEFLATE
|<2>| ASSERT: gnutls_buffers.c:289
|<4>| REC[547060]: Expected Packet[1] Application Data(23) with length: 1024
|<4>| REC[547060]: Received Packet[1] Application Data(23) with length: 208
|<4>| REC[547060]: Decrypted Packet[1] Application Data(23) with length: 6
|<4>| REC[547060]: Sending Packet[1] Application Data(23) with length: 6
|<4>| REC[547060]: Sent Packet[2] Application Data(23) with length: 181
|<4>| REC[547060]: Expected Packet[2] Application Data(23) with length: 1024
|<4>| REC[547060]: Received Packet[2] Application Data(23) with length: 96
|<4>| REC[547060]: Decrypted Packet[2] Application Data(23) with length: 12
|<4>| REC[547060]: Sending Packet[2] Application Data(23) with length: 12
|<4>| REC[547060]: Sent Packet[3] Application Data(23) with length: 165

> 
> Greetings
> Marc
> 

Regards,
Mark