Re: Possible bug: Bad record MAC

Philip Martin wrote on Tue, Mar 05, 2013 at 22:12:17 +0000:
> Paolo Cavallini <cavallini_at_faunalia.it> writes:
> > Network has bben checked cables and switch have been changed, firewall
> > and proxy have not changed.
> > So it could be a communication problem between openssl and subversion.
> >
> > Any hint on how to debug will be greatly appreciated.
>
> Debugging SSL is hard. I don't really know what to suggest. Perhaps
> build a debug version of GnuTLS and use gdb to stop at the point the
> error is raised and examine the decoded data that is causing the
> problem.

Couldn't you get a wireshark/tcpdump trace and then use the server's SSL
private key to decrypt it?

I think it's possible, but I don't know offhand of tools that do it.
Received on 2013-03-06 06:15:23 CET