[gnutls-devel] GnuTLS 3.1.7 can't connect to Google Talk

[Diego Elio Pettenò]

This I reported in Gentoo's bugzilla last night:
https://bugs.gentoo.org/show_bug.cgi?id=456250 and somebody later
reported that the problem affects specifically version 3.1.7.

flame at saladin ~ % gnutls-cli -p 5223 talk.google.com
Processed 160 CA certificate(s).
Resolving 'talk.google.com'...
Connecting to '173.194.65.125:5223'...
- Certificate type: X.509
- Got a certificate list of 2 certificates.
- Certificate[0] info:
 - subject `C=US,ST=California,L=Mountain View,O=Google
Inc,CN=talk.google.com', issuer `C=US,O=Google Inc,CN=Google Internet
Authority', RSA key 1024 bits, signed using RSA-SHA1, activated
`2012-06-05 00:53:35 UTC', expires `2013-06-05 01:03:35 UTC', SHA-1
fingerprint `7833da4b3a1642e680d7f8e58fd99ed31493b790'
        Public Key Id:
                92b4709209e60147dc572dc02c85c45cdc456ade
        Public key's random art:
                +--[ RSA 1024]----+
                |.+*=.B++.+o      |
                | +.o*o= o..      |
                |  . =oo o.       |
                |     = = .       |
                |      + S E      |
                |       .         |
                |                 |
                |                 |
                |                 |
                +-----------------+

- Certificate[1] info:
 - subject `C=US,O=Google Inc,CN=Google Internet Authority', issuer
`C=US,O=Equifax,OU=Equifax Secure Certificate Authority', RSA key 1024
bits, signed using RSA-SHA1, activated `2009-06-08 20:43:27 UTC',
expires `2013-06-07 19:43:27 UTC', SHA-1 fingerprint
`dd7a7f131ddba33d3e8670179483e6fea6987d6a'
- Status: The certificate is trusted.
*** Fatal error: The Diffie-Hellman prime sent by the server is not
acceptable (not long enough).
*** Handshake has failed
GnuTLS error: The Diffie-Hellman prime sent by the server is not
acceptable (not long enough).

Not sure what the problem is exactly, but so it happens that Telepathy
users with 3.1.7 can't connect to Google Talk at all.

Hope somebody has an idea :)
-- 
Diego Elio Pettenò — Flameeyes
flameeyes at flameeyes.eu — http://blog.flameeyes.eu/