mainGnuTLS - Support: sr #107802, GNU TLS 3.0.2 breaks Evolution...

 
 

sr #107802: GNU TLS 3.0.2 breaks Evolution sync with Google Agenda account.

Submitter:  Frederic Bezies <fredbezies>
Submitted:  Thu 15 Sep 2011 07:46:34 PM UTC
   
 
Category:  None Priority:  5 - Normal
Severity:  3 - Normal Status:  Done
Privacy:  Public Assigned to:  nmav
Open/Closed:  Closed Operating System:  GNU/Linux
* Mandatory Fields

Add a New Comment Rich Markup
   

Jump to the original submission

Fri 16 Sep 2011 07:04:08 PM UTC, comment #9: 

Thank you for chasing this out.

Nikos Mavrogiannopoulos <nmav>
Group administrator
Fri 16 Sep 2011 06:53:59 PM UTC, comment #8: 

A little message to say the issue is fixed. It was a bug in glib-networking and it is not longer a problem.

https://bugzilla.gnome.org/show_bug.cgi?id=659233

Thanks a lot for your help.

Frederic Bezies <fredbezies>
Fri 16 Sep 2011 10:23:36 AM UTC, comment #7: 

Ok the text was enough to see the case. Indeed the server terminated the connection non-properly and this is what gnutls is reporting. This is reported via the GNUTLS_E_PREMATURE_TERMINATION error code (in gnutls 2.x the generic GNUTLS_E_UNEXPECTED_PACKET_LENGTH was used). Maybe you could report this to the evolution developers to report the error only without invalidating the already received data. I know that other libraries just ignore this error, but note that if you ignore it you'll never notice an attack that truncates the data sent by the server. From gnutls side there is not much we can do.

Anonymous
Fri 16 Sep 2011 10:07:20 AM UTC, comment #6: 

I printed all datas in text format. You have to use a text editor to read it.

Sorry. I think it was the good option. I hope I could import it and save it in libpcap format.

Frederic Bezies <fredbezies>
Fri 16 Sep 2011 09:59:51 AM UTC, comment #5: 

Unfortunately I cannot open this format with wireshark. Could you save it on libpcap format (the first option in save as).

Anonymous
Fri 16 Sep 2011 09:15:03 AM UTC, comment #4: 

Wireshark dump. Try several times to sync my google agenda without being successful. Hope it helps !

(file #23979)

Frederic Bezies <fredbezies>
Fri 16 Sep 2011 08:37:29 AM UTC, comment #3: 

Download and use the "wireshark" program. Use it to capture data from the interface that you use to access your e-mail (ethernet or so). Then save the output and attach here.

Anonymous
Fri 16 Sep 2011 08:30:38 AM UTC, comment #2: 

Ok. Just tell me how to use tcpdump and I will send you infos you're looking after asap.

Frederic Bezies <fredbezies>
Thu 15 Sep 2011 09:12:57 PM UTC, comment #1: 

Hello the fix might solve the problem you see with evolution but I'm not sure it is the correct fix. It might as well be right to fail because the peer abnormally terminated the connection (in TLS one has to terminate a connection by the protocol and not just terminate the TCP layer). Could you provide a tcpdump of the failed TLS session to verify that this is the case?


Nikos Mavrogiannopoulos <nmav>
Group administrator
Thu 15 Sep 2011 07:46:34 PM UTC, original submission:  

Hello.

I've reported a bug on gnome bugzilla, having a problem related to google agenda sync with evolution.

An error, related to gnutls appeared :

"Cannot open calendar: Unexpected HTTP status code 6 returned (Error reading
data from TLS socket: The TLS connection was non-properly terminated.)"

After doing some search, it turned to be a known bug, already reported on archlinux bugzilla :

https://bugs.archlinux.org/task/25733

It has been found - and I verified this by using the patch - that reverting commit 16b552803790c0f1b393b6f143b166429c51e9f2 fix the issue.

I attached the patch I used to verify the infos I've read.

I'm reporting this issue to your bug tracker, in hope you'll find a way to fix this problem.

Thanks.

Frederic Bezies <fredbezies>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #23979:  wireshark.out added by fredbezies (335KiB - application/octet-stream)
file #23977:  0001-Revert-detect-premature-termination-of-connection.patch added by fredbezies (720B - text/x-diff - patch fixing issue with evolution sync of google agenda accounts.)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by nmav (Posted a comment)
  • -email is unavailable- added by fredbezies (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 6 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2011-09-16 nmav StatusNeed Info Done
        Open/ClosedOpen Closed
    2011-09-16 fredbezies Attached File- Added wireshark.out, #23979
    2011-09-15 nmav StatusNone Need Info
        Assigned toNone nmav
    2011-09-15 fredbezies Attached File- Added 0001-Revert-detect-premature-termination-of-connection.patch, #23977

    Back to the top

    Powered by Savane 3.13-4448.
    Corresponding source code