[gnutls-help] Problem of gnutls on armv8
Zheng, Ruoqin
zhengrq.fnst at cn.fujitsu.com
Thu Feb 9 03:41:57 CET 2017
Hi
I want to use curl to request https in an armv8 board ls1046.
Here is the log:
root # curl -v -k https://192.168.246.2
* Rebuilt URL to: https://192.168.246.2/
* Trying 192.168.246.2...
* Connected to 192.168.246.2 (192.168.246.2) port 443 (#0)
* found 177 certificates in /etc/ssl/certs/ca-certificates.crt
* ALPN, offering http/1.1
* gnutls_handshake() failed: Bad record MAC
* Closing connection 0
curl: (35) gnutls_handshake() failed: Bad record MAC
And here is the kernel, the OS is arm32be compiled by yocto.
root # uname -a
Linux ubinux-armv8be 4.1.30-rt34+ #6 SMP Thu Jan 19 19:05:01 JST 2017 armv7b GNU/Linux
Then I found that curl is using gnutls lib, so I check the tls with gnutls-cli-debug:
root # gnutls-cli-debug 192.168.246.2
GnuTLS debug client 3.3.17
Checking 192.168.246.2:443
for SSL 3.0 (RFC6101) support... no
whether we need to disable TLS 1.2... yes
whether we need to disable TLS 1.1... yes
whether we need to disable TLS 1.0... yes
whether %NO_EXTENSIONS is required... yes
whether %COMPAT is required... yes
for TLS 1.0 (RFC2246) support... no
Server does not support any of SSL 3.0, TLS 1.0 and TLS 1.1 and TLS 1.2
By the way, I ensure that the server is normal.
So is anyone who met this problem or have any solutions?
Thank you
Zheng
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/attachments/20170209/ebf4c749/attachment-0001.html>
More information about the Gnutls-help
mailing list