Packet capture of a few attempts to reproduce the failure via 'gnutls-cli -d 5 hexr.canonical.com'. There will be a few successful handshakes before there is a failure. You'll notice at frame 1086 we have "Alert (Level: Fatal, Description: Bad Record MAC)" sent from the client to the server, notifying that it can't decode the certificate.
Packet capture of a few attempts to reproduce the failure via 'gnutls-cli -d 5 hexr.canonical. com'. There will be a few successful handshakes before there is a failure. You'll notice at frame 1086 we have "Alert (Level: Fatal, Description: Bad Record MAC)" sent from the client to the server, notifying that it can't decode the certificate.