From debbugs-submit-bounces@debbugs.gnu.org Tue Jun 15 08:39:07 2021 Received: (at 49035) by debbugs.gnu.org; 15 Jun 2021 12:39:07 +0000 Received: from localhost ([127.0.0.1]:48634 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lt8LT-0004FQ-5q for submit@debbugs.gnu.org; Tue, 15 Jun 2021 08:39:07 -0400 Received: from eggs.gnu.org ([209.51.188.92]:48166) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lt8LR-0004Es-Ik for 49035@debbugs.gnu.org; Tue, 15 Jun 2021 08:39:06 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:51956) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lt8LK-0007o1-Ay; Tue, 15 Jun 2021 08:38:59 -0400 Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=59954 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lt8LK-0000U6-3C; Tue, 15 Jun 2021 08:38:58 -0400 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: 49035@debbugs.gnu.org Subject: Re: bug#49035: Git 2.32.0 fails with =?utf-8?Q?=E2=80=98gnutls=5F?= =?utf-8?Q?handshake=E2=80=99?= error References: <871r93v665.fsf@inria.fr> Date: Tue, 15 Jun 2021 14:38:56 +0200 In-Reply-To: <871r93v665.fsf@inria.fr> ("Ludovic =?utf-8?Q?Court=C3=A8s=22?= =?utf-8?Q?'s?= message of "Tue, 15 Jun 2021 11:16:50 +0200") Message-ID: <87pmwns3of.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -1.6 (-) X-Debbugs-Envelope-To: 49035 Cc: Emmanuel Agullo X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.6 (--) Ludovic Court=C3=A8s skribis: > $ guix environment -CN --ad-hoc git nss-certs -- git clone https://bitbuc= ket.org/oseledets/rectcross /tmp/rectcross > Cloning into '/tmp/rectcross'... > fatal: unable to access 'https://bitbucket.org/oseledets/rectcross/': gnu= tls_handshake() failed: An illegal parameter has been received. > $ guix describe > Generacio 185 Jun 07 2021 15:07:46 (nuna) > guix e3611cc > repository URL: https://git.savannah.gnu.org/git/guix.git > branch: master > commit: e3611cc412e7b1c750a56d17fb1b7cde684baa3f Initially I thought this might have to do with the GnuTLS 3.6.15 =E2=86=92 3.6.16 replacement: --8<---------------cut here---------------start------------->8--- $ guix environment -CN --no-grafts --ad-hoc git nss-certs -- git clone http= s://bitbucket.org/oseledets/rectcross /tmp/rectcross Cloning into '/tmp/rectcross'... Receiving objects: 100% (112/112), 23.43 KiB | 244.00 KiB/s, done. Resolving deltas: 100% (56/56), done. $ guix build gnutls /gnu/store/199npi1hcv7zn0r19vl29np6ccshii4p-gnutls-3.6.16-debug /gnu/store/8ixa3p7hwb26warjinffcrvzl064wbcg-gnutls-3.6.16-doc /gnu/store/akc7l65z459pnifrr6bcm97cjvmpvp9k-gnutls-3.6.16 $ guix build gnutls --no-grafts /gnu/store/vswbfgjcadrjlkmd5d7p38rr0i87wdqy-gnutls-3.6.15-debug /gnu/store/fzi1qqvcj5h2b6nsajwlqpf0jb66ngnb-gnutls-3.6.15-doc /gnu/store/5yvzilh78996627i8avq532sl2c03i95-gnutls-3.6.15 --8<---------------cut here---------------end--------------->8--- But Git does not use GnuTLS directly, only via cURL: --8<---------------cut here---------------start------------->8--- $ guix graph -t references --path git-minimal $(guix build --no-grafts gnut= ls |grep '[0-9]$') /gnu/store/skxzvsvnl7yqgx99l0m7mqcpz85l8fml-git-minimal-2.32.0 /gnu/store/k9wmrk5m91599lk8gd4rc7h4df642qw0-curl-7.74.0 /gnu/store/5yvzilh78996627i8avq532sl2c03i95-gnutls-3.6.15 --8<---------------cut here---------------end--------------->8--- And indeed, cURL 7.77 (the replacement) exhibits the bogus behavior: --8<---------------cut here---------------start------------->8--- $ guix environment -CN --no-grafts --ad-hoc curl@7.77 nss-certs -- curl htt= ps://bitbucket.org > /dev/null % Total % Received % Xferd Average Speed Time Time Time Cur= rent Dload Upload Total Spent Left Spe= ed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- = 0 curl: (35) gnutls_handshake() failed: An illegal parameter has been receive= d. $ guix environment -CN --no-grafts --ad-hoc curl@7.74 nss-certs -- curl htt= ps://bitbucket.org > /dev/null % Total % Received % Xferd Average Speed Time Time Time Cur= rent Dload Upload Total Spent Left Spe= ed 100 75735 100 75735 0 0 134k 0 --:--:-- --:--:-- --:--:-- 1= 34k --8<---------------cut here---------------end--------------->8--- Ludo=E2=80=99.