Re: GnuTLS issue (Mandos Server/Client)

2014-04-04 Thread Nikos Mavrogiannopoulos
On Thu, 2014-04-03 at 11:14 -0600, Nathanael D. Noblet wrote: > > Does it really use TLS with openpgp certificates? If yes, I doubt you > > could make 2.8.5 interoperate with gnutls 3.1.20. GnuTLS was modified in > > 3.1.x to adhere with RFC6091 which was incompatible the previous attempt > > to h

Re: GnuTLS issue (Mandos Server/Client)

2014-04-03 Thread Nathanael D. Noblet
On Thu, 2014-04-03 at 16:05 +0200, Nikos Mavrogiannopoulos wrote: > On Wed, 2014-04-02 at 10:50 -0600, Nathanael D. Noblet wrote: > > CentOS 6 = gnutls 2.8.5 > > F20 = gnutls 3.1.20 > > The server is a python app and sets the priority string as follows: > > priority=SECURE256:!CTYPE-X.509:+CTY

Re: GnuTLS issue (Mandos Server/Client)

2014-04-03 Thread Nikos Mavrogiannopoulos
On Wed, 2014-04-02 at 10:50 -0600, Nathanael D. Noblet wrote: > CentOS 6 = gnutls 2.8.5 > F20 = gnutls 3.1.20 > The server is a python app and sets the priority string as follows: > priority=SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP > this is fed to some gnutls function somewhere in the stack. Do

Re: GnuTLS issue (Mandos Server/Client)

2014-04-02 Thread Adam Williamson
On Wed, 2014-04-02 at 11:53 -0600, Nathanael D. Noblet wrote: > On Wed, 2014-04-02 at 10:15 -0700, Adam Williamson wrote: > > Well, have you tried the 'obvious' - building the newer gnutls on CentOS > > 6 (or the older on Fedora 20) and building mandos against that, to see > > if the issue is in gn

Re: GnuTLS issue (Mandos Server/Client)

2014-04-02 Thread Nathanael D. Noblet
On Wed, 2014-04-02 at 10:15 -0700, Adam Williamson wrote: > Well, have you tried the 'obvious' - building the newer gnutls on CentOS > 6 (or the older on Fedora 20) and building mandos against that, to see > if the issue is in gnutls or somewhere else in the 'base system'? That'd > narrow it down a

Re: GnuTLS issue (Mandos Server/Client)

2014-04-02 Thread Adam Williamson
On Wed, 2014-04-02 at 10:50 -0600, Nathanael D. Noblet wrote: > Hello, > > I'm working on getting a package (mandos) included in Fedora/EPEL. > Currently its heavily focused on debian based distros so I'm not ready > for a review. However I have it working in a few situations but have > some iss

GnuTLS issue (Mandos Server/Client)

2014-04-02 Thread Nathanael D. Noblet
Hello, I'm working on getting a package (mandos) included in Fedora/EPEL. Currently its heavily focused on debian based distros so I'm not ready for a review. However I have it working in a few situations but have some issues in others. I'm hoping someone here may be able to shed light on what m