GnuTLS does not handle long lists in signature_algorithms correctly
Description of problem:
When server receives a ClientHello msg with signature_algorithms extention which contain list of 64 or more invalid schemes, as SignatureScheme.rsa_pkcs1_sha1 for tls1.3 or (HashAlgorithm.sha1, SignatureAlgorithm.dsa) for tls1.2 with a valid signature_scheme at the end of this list.
GnuTLS server responses with error message Error in handshake: No supported cipher suites have been found.
Version of gnutls used:
Distributor of gnutls (e.g., Ubuntu, Fedora, RHEL)
local compile on Fedora 27
How reproducible:
Steps to Reproduce:
- checkout to large-sig-alg branch (https://github.com/tomato42/tlsfuzzer/pull/453)
- tlsfuzzer scripts/test-tls13-signature-algorithms
- tlsfuzzer scripts/test-signature-algorithms
Actual results:
tlsfuzzer output
Error encountered while processing node <tlsfuzzer.expect.ExpectServerHello object at 0x7f51eb5a7048> (child: <tlsfuzzer.expect.ExpectChangeCipherSpec object at 0x7f51eb5a7080>) with last message being: <tlslite.messages.Message object at 0x7f51eb5a7e10>
Error while processing
Traceback (most recent call last):
File "scripts/test-tls13-signature-algorithms.py", line 633, in main
runner.run()
File "/home/rkolcun/tls_repo/tlsfuzzer/tlsfuzzer/runner.py", line 217, in run
RecordHeader2)))
AssertionError: Unexpected message from peer: Alert(fatal, handshake_failure)
GnuTLS output
|<3>| ASSERT: x509_ext.c[gnutls_subject_alt_names_get]:110
|<3>| ASSERT: x509.c[get_alt_name]:1812
|<3>| ASSERT: mpi.c[wrap_nettle_mpi_print]:60
|<3>| ASSERT: x509_ext.c[gnutls_subject_alt_names_get]:110
|<3>| ASSERT: x509.c[get_alt_name]:1812
|<3>| ASSERT: mpi.c[wrap_nettle_mpi_print]:60
|<3>| ASSERT: mpi.c[wrap_nettle_mpi_print]:60
|<3>| ASSERT: x509_ext.c[gnutls_subject_alt_names_get]:110
|<3>| ASSERT: x509.c[get_alt_name]:1812
|<3>| ASSERT: mpi.c[wrap_nettle_mpi_print]:60
|<3>| ASSERT: mpi.c[wrap_nettle_mpi_print]:60
|<3>| ASSERT: x509_ext.c[gnutls_subject_alt_names_get]:110
|<3>| ASSERT: x509.c[get_alt_name]:1812
|<3>| ASSERT: mpi.c[wrap_nettle_mpi_print]:60
|<3>| ASSERT: attributes.c[_x509_parse_attribute]:103
|<3>| ASSERT: attributes.c[_x509_parse_attribute]:174
|<3>| ASSERT: x509_ext.c[gnutls_subject_alt_names_get]:110
|<3>| ASSERT: x509.c[get_alt_name]:1812
|<3>| ASSERT: mpi.c[wrap_nettle_mpi_print]:60
|<3>| ASSERT: mpi.c[wrap_nettle_mpi_print]:60
HTTP Server listening on IPv4 0.0.0.0 port 4433...done
HTTP Server listening on IPv6 :: port 4433...done
|<5>| REC[0x1236f60]: Allocating epoch #0
|<2>| added 2 protocols, 43 ciphersuites, 18 sig algos and 9 groups into priority list
* Accepted connection from IPv4 127.0.0.1 port 36966 on Fri Sep 7 12:09:34 2018
|<5>| REC[0x1236f60]: Allocating epoch #1
|<3>| ASSERT: buffers.c[get_last_packet]:1171
|<5>| REC[0x1236f60]: SSL 3.0 Handshake packet received. Epoch 0, length: 311
|<5>| REC[0x1236f60]: Expected Packet Handshake(22)
|<5>| REC[0x1236f60]: Received Packet Handshake(22) with length: 311
|<5>| REC[0x1236f60]: Decrypted Packet[0] Handshake(22) with length: 311
|<4>| HSK[0x1236f60]: CLIENT HELLO (1) was received. Length 307[307], frag offset 0, frag length: 307, sequence: 0
|<4>| HSK[0x1236f60]: Client's version: 3.3
|<4>| EXT[0x1236f60]: Parsing extension 'Supported Versions/43' (5 bytes)
|<4>| EXT[0x1236f60]: Found version: 3.4
|<4>| EXT[0x1236f60]: Negotiated version: 3.4
|<4>| EXT[0x1236f60]: Parsing extension 'Supported Groups/10' (4 bytes)
|<4>| EXT[0x1236f60]: Received group SECP256R1 (0x17)
|<4>| EXT[0x1236f60]: Selected group SECP256R1
|<4>| EXT[0x1236f60]: Parsing extension 'Signature Algorithms/13' (134 bytes)
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (2.1) RSA-SHA1
|<4>| EXT[0x1236f60]: rcvd signature algo (8.4) RSA-PSS-RSAE-SHA256
|<4>| HSK[0x1236f60]: Received safe renegotiation CS
|<2>| checking 13.01 (GNUTLS_AES_128_GCM_SHA256) for compatibility
|<3>| ASSERT: server_name.c[gnutls_server_name_get]:235
|<4>| HSK[0x1236f60]: Requested server name: ''
|<4>| HSK[0x1236f60]: checking compat of GNUTLS_AES_128_GCM_SHA256 with certificate[3] (RSA-PSS/X.509)
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of RSA-PSS with RSA-SHA1
|<3>| ASSERT: cert.c[cert_select_sign_algorithm]:1299
|<4>| HSK[0x1236f60]: checking compat of GNUTLS_AES_128_GCM_SHA256 with certificate[1] (DSA/X.509)
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of DSA with RSA-SHA1
|<3>| ASSERT: cert.c[cert_select_sign_algorithm]:1299
|<4>| HSK[0x1236f60]: checking compat of GNUTLS_AES_128_GCM_SHA256 with certificate[2] (EC/ECDSA/X.509)
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of EC/ECDSA with RSA-SHA1
|<3>| ASSERT: cert.c[cert_select_sign_algorithm]:1299
|<4>| HSK[0x1236f60]: checking compat of GNUTLS_AES_128_GCM_SHA256 with certificate[0] (RSA/X.509)
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<4>| checking cert compat with RSA-SHA1
|<3>| ASSERT: signature.c[_gnutls_session_sign_algo_enabled]:368
|<4>| signature algorithm RSA-SHA1 is not enabled
|<3>| ASSERT: cert.c[cert_select_sign_algorithm]:1299
|<4>| HSK[0x1236f60]: checking compat of GNUTLS_AES_128_GCM_SHA256 with certificate[4] (GOST R 34.10-2001/X.509)
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<4>| checking cert compat with RSA-SHA1
|<4>| cannot use privkey of GOST R 34.10-2001 with RSA-SHA1
|<3>| ASSERT: cert.c[cert_select_sign_algorithm]:1299
|<3>| ASSERT: cert.c[_gnutls_server_select_cert]:1459
|<3>| ASSERT: ciphersuites.c[_gnutls_figure_common_ciphersuite]:1514
|<3>| ASSERT: ciphersuites.c[_gnutls_figure_common_ciphersuite]:1587
|<3>| ASSERT: handshake.c[_gnutls_server_select_suite]:1043
|<3>| ASSERT: handshake.c[read_client_hello]:764
|<3>| ASSERT: handshake.c[_gnutls_recv_handshake]:1503
|<3>| ASSERT: handshake.c[handshake_server]:3276
Error in handshake: No supported cipher suites have been found.
|<5>| REC: Sending Alert[2|40] - Handshake failed
|<5>| REC[0x1236f60]: Preparing Packet Alert(21) with length: 2 and min pad: 0
|<5>| REC[0x1236f60]: Sent Packet[1] Alert(21) in epoch 0 and length: 7
|<5>| REC[0x1236f60]: Start of epoch cleanup
|<5>| REC[0x1236f60]: End of epoch cleanup
|<5>| REC[0x1236f60]: Epoch #0 freed
|<5>| REC[0x1236f60]: Epoch #1 freed
Expected results:
Test cases pass.