Subject: TCP Connection teardown seems to violate TCP specification

From: Damian Lukowski <[email-masked]>
Date: Wed, 14 Aug 2013 21:21:35 +0200

Hi,

the TCP specification states that an endpoint has to accept
packets from the other side even after it has half-closed the
connection locally. This does not seem to be the case
under Linux?

For example, when I wget -O /dev/null https://www.verisign.com/
--max-redir 0, the local TCP stack sends an FIN,ACK close to the end.
However, the webserver has more data to send (Encrypted Alert).
Instead of ACKing the packet, the local side sends a RST.
This seems wrong to me.

Regards
 Damian