#gnutls

A Little POODLE Left in GnuTLS (old Versions)

tl;dr Older GnuTLS variations (2.x) fail to examine the primary byte of the padding in CBC modes. Numerous secure Linux distributions, together with Ubuntu LTS and Debian wheezy (oldstable) use this model. Present GnuTLS variations usually are not affected. A few days in the past an email on the ssllabs mailing list catched my consideration. A Canonical developer had noticed that the SSL Labs…

Squid + GnuTLS 不支援 Intermediate Certificate 的問題

先前在「架設 Proxy over TLS」這邊提到了我用 Squid 架 Proxy over TLS 的服務起來用，本來在家裡跑得好好的，但到了公司發現卻不能用，追蹤後發現是目前 Ubuntu 裡面包的 Squid + GnuTLS 沒有辦法支援 intermediate certificate 的問題，而且有人問過了：「[squid-users] HTTPS_PORT AND SSL CERT」。 這邊先講測試的方法，然後後面再講解法。 測試的方式可以用 openssl s_client -connect hostname:port 測，正常的情況會可以看到兩層。 在這邊的例子裡，R3 簽了 home.gslin.org，DST Root CA X3 簽了 R3，而 DST Root CA X3 則在 root certificate 名單中： $ openssl…

Linux users beware – critical GnuTLS bug found

A new critical GnuTLS bug has been recently discovered and has quickly got patched after security specialists were made aware of the seriousness of the bug, which allowed malicious servers to hijack users of the GnuTLS cryptographic library.

Nikos Mavrogiannopoulos, a Red Hat engineer, issued a patchlast Saturday, a week after the bug was reported by Joonas Kuorilehto, a Codenomicon researcher…

Link: Test SSL / TLS with GnuTLS from the Command Line

GnuTLS has a command line app gnutls-cli that can inspect any various SSL or TLS connections. Check it out!

Full article here: Test SSL / TLS with GnuTLS from the Command Line (scottlinux.com)