https://bugs.openldap.org/show_bug.cgi?id=9210
Ryan Tandy ryan@openldap.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |DUPLICATE Status|UNCONFIRMED |RESOLVED
--- Comment #10 from Ryan Tandy ryan@openldap.org --- I just noticed your original report did mention sssd. So yes, this is exactly bug 8650. This case was previously documented as https://bugs.debian.org/849756 and https://github.com/SSSD/sssd/pull/67. The "fix" for that issue was to change the socket to blocking which is more like a workaround for the libldap bug. It's the same bug and happens equally if libldap sets the socket non-blocking itself (for example when doing an async connect). The GNUTLS_E_UNAVAILABLE_DURING_HANDSHAKE error code was introduced in GnuTLS 3.6.0 https://gitlab.com/gnutls/gnutls/issues/158 exactly to highlight users like libldap doing the wrong thing with gnutls_handshake.
*** This bug has been marked as a duplicate of bug 8650 ***