gnutls 3.6.4 clients unable to talk to gnutls 3.6.5 servers due to record-size-limit extension in ServerHello

Lennert Buytenhek <[email protected]>
Newsgroups gmane.network.gnutls.general
Message-ID <[email protected]>
Hello!

I'm using a TLS application which broke after upgrading the server to
GnuTLS 3.6.5, because the GnuTLS 3.6.5 server now sends a record-size-limit
extension (28) in its ServerHello, which the 3.6.4-using client doesn't
grok, and the handshake dies on the client side with:

	gnutls_handshake: An illegal TLS extension was received.

This appears to mean that GnuTLS <= 3.6.4 clients will not be able to
talk to GnuTLS 3.6.5 servers at all?

I understand that GnuTLS <= 3.6.4 are buggy in the sense that they do
not accept a record-size-limit extension received in a ServerHello even
though it is legal to send this extension in a ServerHello, but is there
at least a way to turn off sending this extension on the server side, so
that it can continue to interoperate with older clients until those can
be upgraded?  (I didn't see any such way.)


Thanks,
Lennert
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.