[Weechat-dev] [bug #22912] SSL connect issue with libgnutls 2.2.2

[None]

URL:
  <http://savannah.nongnu.org/bugs/?22912>

                 Summary: SSL connect issue with libgnutls 2.2.2
                 Project: Wee Enhanced Environment for Chat
            Submitted by: wilysloth
            Submitted on: Monday 14/04/08 at 13:08
                Category: other
                Severity: 3 - Normal
              Item Group: other
                  Status: None
                 Privacy: Public
             Assigned to: None
         Originator Name: 
        Originator Email: 
             Open/Closed: Open
         Discussion Lock: Any
                 Release: 0.2.6
                IRC nick: 

    _______________________________________________________

Details:

I am trying to connect via SSL to a private IRC server. BitchX works fine.
weechat 2.6 with libgnutls 1.6.3 works fine. weechat 2.6 (compiled from same
source) with libgnutls 2.2.2 does not.

[12:08:34] -=- WeeChat: connecting to server irc.wibble.org:994 (SSL)...
[12:08:34] =!= WeeChat Error: gnutls handshake failed
[12:08:34] -=- WeeChat: Reconnecting to server in 30 seconds

$ ldd `which weechat-curses`
        libdl.so.2 => /lib/libdl.so.2 (0x40025000)
        libncursesw.so.5 => /lib/libncursesw.so.5 (0x40030000)
        libgnutls.so.26 => /usr/lib/libgnutls.so.26 (0x4006b000)
        libc.so.6 => /lib/libc.so.6 (0x400e8000)
        /lib/ld-linux.so.2 (0x40000000)
        libtasn1.so.3 => /usr/lib/libtasn1.so.3 (0x4020f000)
        libgpg-error.so.0 => /usr/lib/libgpg-error.so.0 (0x40224000)
        libz.so.1 => /usr/lib/libz.so.1 (0x4022f000)
        libgcrypt.so.11 => /usr/lib/libgcrypt.so.11 (0x4024d000)

$ ldd `which gnutls-cli`
        libgnutls.so.26 => /usr/lib/libgnutls.so.26 (0x40025000)
        libgnutls-extra.so.26 => /usr/lib/libgnutls-extra.so.26 (0x400a2000)
        libtasn1.so.3 => /usr/lib/libtasn1.so.3 (0x400b4000)
        libgcrypt.so.11 => /usr/lib/libgcrypt.so.11 (0x400c9000)
        libgpg-error.so.0 => /usr/lib/libgpg-error.so.0 (0x40136000)
        libc.so.6 => /lib/libc.so.6 (0x40141000)
        libz.so.1 => /usr/lib/libz.so.1 (0x40268000)
        libopencdk.so.10 => /usr/lib/libopencdk.so.10 (0x40286000)
        libnsl.so.1 => /lib/libnsl.so.1 (0x402ac000)
        /lib/ld-linux.so.2 (0x40000000)

$ gnutls-cli --version
gnutls-cli (GnuTLS) 2.2.2

$ gnutls-cli -p 994 irc.wibble.org
Resolving 'irc.wibble.org'...
Connecting to 'XX.XX.XX.XX:994'...
- Ephemeral DH using prime of 520 bits, secret key of 502 bits, and peer's
public key is 512 bits.
- Certificate type: X.509
 - Got a certificate list of 1 certificates.

 - Certificate[0] info:
 # The hostname in the certificate matches 'irc.wibble.org'.
 # valid since: Thu Jul 26 20:38:05 BST 2007
 # expires at: Wed May 26 14:09:49 BST 1971
 # fingerprint: 29:AE:68:43:E4:1E:06:AF:19:35:93:76:8E:5A:4B:BA
 # Subject's DN: C=UK,ST=Under The Bonfire,O=Wibble,CN=irc.wibble.org
 # Issuer's DN: O=Wibble,address@hidden,L=WibbleHQ,ST=Under The
Bonfire,C=UK


- Peer's certificate issuer is unknown
- Peer's certificate is NOT trusted
- Version: TLS1.0
- Key Exchange: DHE-RSA
- Cipher: AES-128-CBC
- MAC: SHA1
- Compression: NULL
- Handshake was completed

- Simple Client Mode:

NOTICE AUTH :*** Looking up your hostname...
NOTICE AUTH :*** Found your hostname, welcome back
NOTICE AUTH :*** Checking ident
NOTICE AUTH :*** No identd (auth) response

gnutls-cli seems to handshake okay (despite a strange looking expiry date).
Any ideas why weechat might be having trouble when using the same library?





    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?22912>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/