I was testing tls1.3 0rtt. I have tls1.3 mint server running locally and I could not connect. I have seen that I am hitting this assertions [Parent 46200] ###!!! ASSERTION: Invalid state transition to waiting_for_cert_verification: 'mCertVerificationState != waiting_for_cert_verification', file /home/dragana/dragana_work/necko/mozilla-central/security/manager/ssl/nsNSSIOLayer.cpp, line 513 [Parent 46200] ###!!! ASSERTION: Invalid state transition to cert_verification_finished: 'mCertVerificationState == waiting_for_cert_verification', file /home/dragana/dragana_work/necko/mozilla-central/security/manager/ssl/nsNSSIOLayer.cpp, line 526 If I let cert verification happen on the socketThread, i.e. I have commented out part in if statement: http://mxr.mozilla.org/mozilla-central/source/security/manager/ssl/SSLServerCertVerification.cpp#1594 It works fine. I know the is not a solution :) just writing down what I have seen. The server runs locally just for testing so the certificates are self-signed and I have added an exception for them.
I *think* this is a dupe of Bug 1274718. In particular - the same area of code is specifically highlighted, and the assertions listed here strike me as something that would fire if Async AuthCertificate support wasn't implemented. However, please re-open if this is incorrect.
Status: NEW → RESOLVED
Last Resolved: 3 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 1274718
You need to log in before you can comment on or make changes to this bug.