Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #1069463

Bug#993507: libgnutls30: fails to negotiate X25519 where NSS & OpenSSL succeed, success with X448

From Lionel Élie Mamane <lionel@mamane.lu>
Newsgroups linux.debian.bugs.dist
Subject Bug#993507: libgnutls30: fails to negotiate X25519 where NSS & OpenSSL succeed, success with X448
Date 2021-09-02 20:50 +0200
Message-ID <CSZWF-2wn-3@gated-at.bofh.it> (permalink)
References <CSS8N-64b-1@gated-at.bofh.it> <CSS8N-64b-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


tags 993507 +upstream
forwarded 993507 https://gitlab.com/gnutls/gnutls/-/issues/1249
retitle 993507 libgnutls30: client 'illegal parameter' error when both X25519 and X448 are enabled and the server picks one of those
thanks

On Thu, Sep 02, 2021 at 12:04:02PM +0200, Lionel Elie Mamane wrote:
> $ gnutls-cli --priority 'NORMAL:-GROUP-SECP256R1:-GROUP-SECP384R1:-GROUP-SECP521R1' fxtop.com
> *** Fatal error: An illegal parameter has been received.

> $ gnutls-cli --priority 'NORMAL:-GROUP-SECP256R1:-GROUP-SECP384R1:-GROUP-SECP521R1:-GROUP-X25519' fxtop.com
> - Description: (TLS1.3)-(ECDHE-X448)-(RSA-PSS-RSAE-SHA256)-(AES-256-GCM)

$ gnutls-cli --priority 'NORMAL:-GROUP-ALL:+GROUP-X25519' fxtop.com
succeeds, too, in line with the upstream bug description,

It is not immediately obvious to me in what released version that
upstream bug is fixed.

-- 
Lionel

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Bug#993507: libgnutls30: fails to negotiate X25519 where NSS & OpenSSL succeed, success with X448 Lionel Elie Mamane <lionel@mamane.lu> - 2021-09-02 12:30 +0200
  Bug#993507: libgnutls30: fails to negotiate X25519 where NSS & OpenSSL succeed, success with X448 Lionel Élie Mamane <lionel@mamane.lu> - 2021-09-02 20:50 +0200
    Bug#993507: libgnutls30: fails to negotiate X25519 where NSS & OpenSSL succeed, success with X448 Andreas Metzler <ametzler@bebt.de> - 2021-09-04 07:50 +0200

csiph-web