Bug#733039: libgnutls28: wget fails with GnuTLS error after libgnutls28 upgrade

[Neil Roeth]

On 12/24/2013 08:04 AM, Andreas Metzler wrote:
> On 2013-12-24 Neil Roeth <neil at debian.org> wrote:
>> Package: libgnutls28
>> Version: 3.2.7-3
>> Severity: important
>> I use wget in a cron job to connect to a URL and retrieve some
>> information. After an upgrade from libgnutls28:amd64 3.2.4-4 to
>> 3.2.7-3, an attempt to reach an encrypted site with wget fails with
>> this error:
>> GnuTLS: Error in the pull function.
>> Unable to establish SSL connection.
>> Reverting to 3.2.4-4 enabled it to connect immediately. Please let
>> me know if you would like me to generate any particular kind of
>> debugging output that would help resolve this problem.
> [...]
>
> Could you post the URI?
>
> Can you connect with gnutls-cli(-debug)?
>
> tia, cu Andreas
The URI is https://api.dreamhost.com/

This command will illustrate the problem: wget -O- -q 
https://api.dreamhost.com/

I get similar behavior with gnutls-cli, it connects with 
libgnutls28-3.2.4 and hangs with libgnutls28-3.2.7.  Attached are the 
two logs.

Thanks.



-- 
Neil Roeth

-------------- next part --------------
A non-text attachment was scrubbed...
Name: gnutls-cli-3.2.4.log
Type: text/x-log
Size: 15436 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20131224/901c4b36/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: gnutls-cli-3.2.7.log
Type: text/x-log
Size: 7698 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/attachments/20131224/901c4b36/attachment-0003.bin>