Interestingly the tests are the follwing way:
expect-srvfail expect-clientfail result
true, false, ok
false, false, fail
false, false, fail
true, false, ok
false, false, fail
false, false, fail
Given that pattern it is possible that server verification now just ALWAYS fails.
That would still give exactly the pattern we see.
Neither gnutls upgrade announce to change anything around this: /lists. gnupg.org/ pipermail/ gnutls- devel/2016- October/ 008194. html /lists. gnupg.org/ pipermail/ gnutls- devel/2016- November/ 008221. html
https:/
https:/
Interestingly the tests are the follwing way:
expect-srvfail expect-clientfail result
true, false, ok
false, false, fail
false, false, fail
true, false, ok
false, false, fail
false, false, fail
Given that pattern it is possible that server verification now just ALWAYS fails.
That would still give exactly the pattern we see.