Bug#1068644: gnutls-bin: "Fatal error: The encryption algorithm is not supported" appeared with 3.8.5 upgrade

[Andreas Metzler]

Control: severity -1 serious
Control: forwarded -1 https://gitlab.com/gnutls/gnutls/-/issues/1540

On 2024-04-08 Sanjoy Mahajan <sanjoy at mit.edu> wrote:
> Package: gnutls-bin
> Version: 3.8.5-1
> Severity: normal
> X-Debbugs-Cc: none, Sanjoy Mahajan <sanjoy at mit.edu>
> File: /usr/bin/gnutls-cli

> After dist-upgrading today, exim4 could no longer talk to my usual
> outgoing mail server.  I reproduced the problem using just gnutls-cli.
> The problem started after today's upgrade of the various gnutls
> packages.  They were upgraded from 3.8.4-2 to 3.8.5-1.

> The following command with the given input lines reproduces the problem:

>   $ gnutls-cli -V -d 9 --starttls --crlf --port 587 -V outgoing.mit.edu
>   EHLO randomhost
>   STARTTLS
>   ctrl-D [to send EOF]

> It fails with "*** Fatal error: The encryption algorithm is not supported."
[...]

Thank you and sorry. I have done a bisect and will try reverting the
offending upstream commit as a hotfix.

cu Andreas