[gnutls-help] gnutls-cli and apache

[Frédéric Dreier]

Hi,

I use ubuntu 12.4 which have gnutls-2.12 which is pretty up-to-date I think.

I tried to start openssl server instead of using apache and I get this
results:

openssl s_server -accept 444  -cert server.crt -key server.key -CAfile
ca.crt -verify required -tls1   => works with gnutls-cli

openssl s_server -accept 444  -cert server.crt -key server.key -CAfile
ca.crt -verify required -tls1_1   => works with gnutls-cli

openssl s_server -accept 444  -cert server.crt -key server.key -CAfile
ca.crt -verify required -tls1_2   => fail with gnutls-cli

Perhaps it may help to understand why it fail with apache and mod_ssl ?





2013/2/12 Nikos Mavrogiannopoulos <nmav at gnutls.org>

> On 02/11/2013 05:48 PM, Frédéric Dreier wrote:
>
> > Hi,
> >
> > I try since some hours deploy a webdav server using apache under ubuntu
> > 12.4 using client certificates.
> [...]
>
> > Now I want to use davfs2 which use gnutls but it exits with an gnutls
> error (handshake failed, no details)
>
> >
> > I tried with gnutls-cli and I also get an error (with more details), but
> I
> > am not able to understand it (or what is incorrect).
> [...]
> > I only found one post refering to unimplemented SHA512 in gnutls. Is that
> > the reason?
>
>
> Hello,
>  Which version of gnutls is that? Note that many distributions have many
> years old gnutls. If this is the case, try using a recent version of
> gnutls from www.gnutls.org.
>
> regards,
> Nikos
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/attachments/20130212/83bfb999/attachment-0001.htm>