Description of problem:
KeyUpdate messages interleaved with ApplicationData are not rejected by gnutls.
This is a RFC 8446 section 5.1 violation:
- Handshake messages MUST NOT be interleaved with other record
types. That is, if a handshake message is split over two or more
records, there MUST NOT be any other records between them.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. run tlsfuzzer test-tls13-keyupdate.py test script against gnutls server
among failing tests there are
'1/4 fragmented keyupdate msg, appdata between'
'2/3 fragmented keyupdate msg, appdata between'
'3/2 fragmented keyupdate msg, appdata between'
'4/1 fragmented keyupdate msg, appdata between'
the above tests should not be listed as failing
there are also issues in handling split GET messages and multiple KeyUpdates in succession, but they are not directly related to this issue
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.