[gnutls-devel] GnuTLS not working with AXA !?

[Tim Ruehsen]

Hi,

while testing, I stumbled upon www.axa.co.uk.

$ gnutls-cli -d3 -V www.axa.co.uk 
...
Processed 171 CA certificate(s).
Resolving 'www.axa.co.uk'...
Connecting to '163.156.208.179:443'...
|<3>| ASSERT: gnutls_constate.c:586
|<3>| ASSERT: gnutls_buffers.c:1139
|<3>| ASSERT: gnutls_record.c:795
|<3>| ASSERT: gnutls_record.c:802
|<3>| ASSERT: gnutls_record.c:1322
|<3>| ASSERT: gnutls_buffers.c:1392
|<3>| ASSERT: gnutls_handshake.c:1428
|<3>| ASSERT: gnutls_handshake.c:2714
*** Fatal error: A TLS fatal alert has been received.
*** Received alert [70]: Error in protocol version
*** Handshake has failed
GnuTLS error: A TLS fatal alert has been received.

I also did try "NORMAL:%COMPAT", +VERS-SSL3.0 and some more with extensions 
enabled/disabled.
Firefox/Iceweasel (OpenSSL I guess) do not have a problem.
I am using GnuTLS 3.3.11.

Tim
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: </pipermail/attachments/20150116/2894228e/attachment.sig>