[gnutls-devel] GnuTLS | gnutls-cli lutris.net fails (#779)

Development of GNU's TLS library gnutls-devel at lists.gnutls.org
Mon Jun 3 21:07:54 CEST 2019




This is with 3.6.8

```
# test whether tls1.2 works
$ gnutls-cli --priority NORMAL:-VERS-TLS1.3 lutris.net
Processed 154 CA certificate(s).
Resolving 'lutris.net:443'...
Connecting to '104.27.186.245:443'...
*** Fatal error: Error in the pull function.

# test whether any new groups cause issue
$ gnutls-cli  lutris.net --priority NORMAL:-GROUP-ALL:+GROUP-SECP256R1
Processed 154 CA certificate(s).
Resolving 'lutris.net:443'...
Connecting to '104.27.186.245:443'...
*** Fatal error: Error in the pull function.

# use the debug tool
$ gnutls-cli-debug lutris.net
GnuTLS debug client 3.6.8
Checking lutris.net:443
                        whether we need to disable TLS 1.2... yes
                        whether we need to disable TLS 1.1... yes
                        whether we need to disable TLS 1.0... yes
                        whether %NO_EXTENSIONS is required... yes
                               whether %COMPAT is required... yes
                             for TLS 1.0 (RFC2246) support... no
 for TLS 1.0 (RFC2246) support with TLS 1.0 record version... no
                             for TLS 1.1 (RFC4346) support... no
                                  fallback from TLS 1.1 to... failed
                             for TLS 1.2 (RFC5246) support... no
                             for TLS 1.3 (RFC8446) support... no
                       TLS1.2 neg fallback from TLS 1.6 to... failed (server requires fallback dance)

Server does not support any of SSL 3.0, TLS 1.0, 1.1, 1.2 and 1.3
```

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/issues/779#note_177437020
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20190603/2c1e9cc5/attachment.html>


More information about the Gnutls-devel mailing list