Bug#806426: Some TLS certificates not suppoprted

2015-12-01 Thread Aleś Bułojčyk
Hi Daniel, Andreas. On 30 November 2015 at 22:42, Daniel Kahn Gillmor wrote: > > > This is bizarre and looks to me like a packet being tampered with on the > wire. > > You are right. It was my wrong firewall rules for 443->4443 port forwarding for be able to run server on non-privileged port. I

Bug#806426: Some TLS certificates not suppoprted

2015-11-30 Thread Daniel Kahn Gillmor
On Mon 2015-11-30 20:44:31 +0200, Aleś Bułojčyk wrote: > Hi Andres. > > On 30 November 2015 at 20:31, Andreas Metzler wrote: > >> I am stumped, could you plese post the output of >> gnutls-cli -V -d 4711 freedns.afraid.org >> >> > $ gnutls-cli --version > gnutls-cli 3.3.8 > ... > > > $ gnutls-cli

Bug#806426: Some TLS certificates not suppoprted

2015-11-30 Thread Aleś Bułojčyk
Hi Andres. On 30 November 2015 at 20:31, Andreas Metzler wrote: > I am stumped, could you plese post the output of > gnutls-cli -V -d 4711 freedns.afraid.org > > $ gnutls-cli --version gnutls-cli 3.3.8 ... $ gnutls-cli -V -d 4711 freedns.afraid.org Processed 173 CA certificate(s). Resolving '

Bug#806426: Some TLS certificates not suppoprted

2015-11-30 Thread Andreas Metzler
On 2015-11-30 Aleś Bułojčyk wrote: > On 28 November 2015 at 22:07, Andreas Metzler wrote: >> On 2015-11-27 Aleś Bułojčyk wrote: >>> Package: libgnutls-deb0-28 >>> Version: 3.3.8-6+deb8u3 >>> I can't connect to many https hosts using Debian 8.2: >>> $ gnutls-cli google.com >>> Processed 173 CA

Bug#806426: Some TLS certificates not suppoprted

2015-11-29 Thread Aleś Bułojčyk
Hi Andres. It shouldn't be a local issue. It's fresh installation of latest Debian amd64 into VirtualBox(without VirtualBox guest additions). $ which gnutls-cli /usr/bin/gnutls-cli $ ldd `which gnutls-cli` linux-vdso.so.1 (0x7ffd2f58c000) libgnutls-deb0.so.28 => /usr/lib/x86_64-linux

Bug#806426: Some TLS certificates not suppoprted

2015-11-28 Thread Andreas Metzler
On 2015-11-27 Aleś Bułojčyk wrote: > Package: libgnutls-deb0-28 > Version: 3.3.8-6+deb8u3 > I can't connect to many https hosts using Debian 8.2: > $ gnutls-cli google.com > Processed 173 CA certificate(s). > Resolving 'google.com'... > Connecting to '216.58.209.142:443'... > |<1>| Received reco

Bug#806426: Some TLS certificates not suppoprted

2015-11-27 Thread Aleś Bułojčyk
Package: libgnutls-deb0-28 Version: 3.3.8-6+deb8u3 I can't connect to many https hosts using Debian 8.2: $ gnutls-cli google.com Processed 173 CA certificate(s). Resolving 'google.com'... Connecting to '216.58.209.142:443'... |<1>| Received record packet of unknown type 72 *** Fatal error: An une