Re: [gnutls-dev] GNUTLS_E_INTERNAL_ERROR in _gnutls_ciphertext2compressed

[Nikos Mavrogiannopoulos]

On Tuesday 13 November 2007, Tim Kosse wrote:
> I've got several reports of failing connections with
> GNUTLS_E_INTERNAL_ERROR.
>
> I could track this problem down to the end of
> _gnutls_ciphertext2compressed in gnutls_cipher.cpp:
>
> if (compress_size < length) return GNUTLS_E_INTERNAL_ERROR
>
> In all these cases, compress_size was 16284. Length was slightly larger

Do you mean 16384 instead?

> by various amounts. For example 16394 was a value I could frequently
> observe.

Well... If I understand correctly your compressed data decompressed to 
something over 2^14.  This is not allowed by the TLS 1.0 spec and this
is the reason you see this error. Are you using gnutls for both peers? 
Which version?


regards,
Nikos