-
Notifications
You must be signed in to change notification settings - Fork 2.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Early data test case will fail randomly cause the anti-play protection from gnutls server #6623
Comments
gnutls server failed here:
We suspect that the time computation error or even the platform doesn't support time functions. |
The gnutls code path: https://www.gnupg.org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.2.tar.xz or https://gitlab.com/gnutls/gnutls/-/blob/master/lib/tls13/anti_replay.c#L151. And the error report happend in line 151 of file lib/tls13/anti_replay.c |
The line https://gitlab.com/gnutls/gnutls/-/blob/master/lib/tls13/anti_replay.c#L151 is not changed about 3years. I think it is most likely our fault. |
Re-opening as it's not fully fixed, and we have #6788 to fix it |
Summary
We have one test case in tests/opt-testcases/tls13-misc.sh, it will fail randomly when the anti-replay protection is triggered by gnutls server.
It's one test case during development, and only test the early data indication writing in client hello, we should dig more about the gnutls server to find what cause the protection be triggered.
System information
Mbed TLS version (number or commit id): development
Operating system and version:
Configuration (if not default, please attach
mbedtls_config.h
):Compiler and options (if you used a pre-built binary, please indicate how you obtained it):
Additional environment information:
Expected behavior
Test case passed
Actual behavior
Random failed.
Steps to reproduce
It's one random issue.
Please run the test case "TLS 1.3 m->G: EarlyData: basic check, good" in he file tests/opt-testcases/tls13-misc.sh.
The text was updated successfully, but these errors were encountered: