Hi Nikos, > That reminded me of: > https://bugzilla.redhat.com/show_bug.cgi?id=1105575
Exactly the same, yes. I downloaded your pcap and found the precise same pattern. > I remember I spent quite some time trying to understand what are these > messages. Not sure if it was ever forwarded upstream. I'm not the only one who got confused then ;-) You seem to have come to the same conclusion too: WireShark is outputting data in a confusing manner, by trying to decode what it can, which is always senseless after a Change CipherSpec. Alaz, WireShark isn't aware of the stream and TLS records don't hint at encryption, so I'm already surprised that it decides that the handshakes are encrypted later on. It's the inconsistency that hurts. My WireShark is 1.2.12 and it still does this. Thanks, -Rick _______________________________________________ Gnutls-help mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnutls-help
