Re: Bug#623001: libgnutls26: fails to handshake on a number of sites (firefox works)

[Andreas Metzler]

On 2011-04-16 Gustavo Noronha Silva <address@hidden> wrote:
> Package: libgnutls26
> Version: 2.12.2-1
[...]
> I've been seeing this problem mostly in Epiphany - the web page
> renders with the layout totally broken because the CSS failed to
> download because of this issue. Some big sites like github.com are
> affected.
[...]
> The reason reported is 'Peer failed to perform TLS handshake'. Here's
> a test with gnutls-cli:

>       address@hidden:~$ gnutls-cli d3nwyuy0nl342s.cloudfront.net
>       Resolving 'd3nwyuy0nl342s.cloudfront.net'...
>       Connecting to '204.246.175.60:443'...
>       *** Fatal error: A TLS fatal alert has been received.
>       *** Received alert [40]: Handshake failed
>       *** Handshake has failed
>       GnuTLS error: A TLS fatal alert has been received.
[...]
> ii  libgcrypt11               1.5.0~beta1-1  LGPL Crypto library - runtime 
> libr
[...]

Hello,

thank you for taking the time to test the packages in experimental. I
can reproduce the bug.

For clarification it is not caused by libgcrypt11 from experimental,
libgnutls26 2.12.2-1 with stable libgcrypt11 also fails.  Attached
verbose log is not a lot more enlightening.

cu andreas

gnutls.exp.oldgcrypt
Description: Text document