Bug#835342: curl or git clone commands throws "gnutls_handshake() failed" on https targets

[Andreas Metzler]

On 2016-08-24 "marcelomendes at gmail.com" <marcelomendes at gmail.com> wrote:
> Package: libgnutls30
> Version: 3.5.3-2
> Severity: important
> Tags: upstream

> Dear Maintainer,

> Trying to git clone a github repo using libgnutls30 3.5.3-2 throw the
> following error:

> fatal: unable to access 'https://github.com/xxx/yyy/': gnutls_handshake()
> failed: Public key signature verification has failed.

> Same happens for curl:

> curl https://duckduckgo.com
> curl: (35) gnutls_handshake() failed: Public key signature verification has
> failed.

Hello,
Are you able to reproduce either of these errors with gnutls-cli?

> Downgrading to libgnutls30 3.5.2-2 solves the issue

> PS.: For some reason I can't find this version on the debian repository
> anymore, but I did on another machine previously and it worked as stated above:

The Debian mirrors only carry packages which are part of release
(stable, unstable, testing, etc.). 3.5.2-2 is not. Old versions can be
found on http://snapshot.debian.org/

cu Andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'