bytinbit / strongswan

strongSwan - IPsec-based VPN
https://www.strongswan.org
Other
2 stars 0 forks source link

libtls: Deal with concatenated certificates in Certificate message #36

Closed bytinbit closed 4 years ago

bytinbit commented 4 years ago

Fails when connecting to Google, i.e. externally:

Derive handshake secrets success
processing TLS ChangeCipherSpec record (1 bytes)
processing TLS ApplicationData record (2477 bytes)
received TLS EncryptedExtensions handshake (2 bytes)
received TLS Certificate handshake (2335 bytes)
received TLS server certificate 'C=US, ST=California, L=Mountain View, O=Google LLC, CN=www.google.com'
L0 - x509:  ASN.1 object smaller than 2 octets
OpenSSL X.509 parsing failed
building CRED_CERTIFICATE - X509 failed, tried 4 builders
parsing TLS certificate failed, skipped
1103 bytes insufficient to parse 282160 bytes of data
certificate message invalid
sending fatal TLS alert 'decode error'
sending TLS ApplicationData record (19 bytes)
TLS write error