bug#17029: 24.3.50; gnutls-error

bug#17029: 24.3.50; gnutls-error

[Peter Münster]

Hi,

With the latest bzr-version (revno 116774), `url-retrieve-synchronously'
terminates with a gnutls-error:

--8<---------------cut here---------------start------------->8---
Contacting host: btc-e.com:443
gnutls.c: [0] (Emacs) fatal error: An unexpected TLS handshake packet was received.
gnutls.el: (err=[-19] An unexpected TLS handshake packet was received.) boot: (:priority NORMAL :hostname btc-e.com :loglevel 0 :min-prime-bits 256 :trustfiles (/etc/ssl/ca-bundle.pem) :crlfiles nil :keylist nil :verify-flags nil :verify-error nil :callbacks nil)
Entering debugger...
--8<---------------cut here---------------end--------------->8---

This is the test-command:
(url-retrieve-synchronously "https://btc-e.com/api/2/btc_eur/ticker")

And here the backtrace:

--8<---------------cut here---------------start------------->8---
Debugger entered--Lisp error: (gnutls-error #<process btc-e.com> -19)
  signal(gnutls-error (#<process btc-e.com> -19))
  gnutls-negotiate(:process #<process btc-e.com> :type gnutls-x509pki :hostname "btc-e.com")
  open-gnutls-stream("btc-e.com" #<buffer  *url-http-temp*> "btc-e.com" 443)
  network-stream-open-tls("btc-e.com" #<buffer  *url-http-temp*> "btc-e.com" 443 (:type tls :nowait t))
  open-network-stream("btc-e.com" #<buffer  *url-http-temp*> "btc-e.com" 443 :type tls :nowait t)
  byte-code("\306\211\n\307>\203$\n\310=\203\311\312
\313\n\314\315\316\317\"\202Y\n\320=\2034\321       \f
$\202Y\n\322=\203D\323                       \f
$\202Y\n\324=\203T\325\f
$\202Y\326\327\"*\306\207" [coding-system-for-write coding-system-for-read gw-method name buffer host binary (tls ssl native) native plain open-network-stream :type :nowait featurep make-network-process (:nowait t) socks socks-open-network-stream telnet url-open-telnet rlogin url-open-rlogin error "Bad setting of url-gateway-method: %s" service url-gateway-method conn] 11)
  url-open-stream("btc-e.com" #<buffer  *url-http-temp*> "btc-e.com" 443)
  url-http-find-free-connection("btc-e.com" 443)
  url-http([cl-struct-url "https" nil nil "btc-e.com" nil "/api/2/btc_eur/ticker" nil nil t nil t] #[128 "\302\303\304p#\210\300\305\240\210\301p\240\207" [(nil) (nil) url-debug retrieval "Synchronous fetching done (%S)" t] 5 "\n\n(fn &rest IGNORED)"] (nil))
  url-https([cl-struct-url "https" nil nil "btc-e.com" nil "/api/2/btc_eur/ticker" nil nil t nil t] #[128 "\302\303\304p#\210\300\305\240\210\301p\240\207" [(nil) (nil) url-debug retrieval "Synchronous fetching done (%S)" t] 5 "\n\n(fn &rest IGNORED)"] (nil))
  url-retrieve-internal("https://btc-e.com/api/2/btc_eur/ticker" #[128 "\302\303\304p#\210\300\305\240\210\301p\240\207" [(nil) (nil) url-debug retrieval "Synchronous fetching done (%S)" t] 5 "\n\n(fn &rest IGNORED)"] (nil) nil nil)
  url-retrieve("https://btc-e.com/api/2/btc_eur/ticker" #[128 "\302\303\304p#\210\300\305\240\210\301p\240\207" [(nil) (nil) url-debug retrieval "Synchronous fetching done (%S)" t] 5 "\n\n(fn &rest IGNORED)"] nil nil nil)
  url-retrieve-synchronously("https://btc-e.com/api/2/btc_eur/ticker")
  eval((url-retrieve-synchronously "https://btc-e.com/api/2/btc_eur/ticker") nil)
  eval-expression((url-retrieve-synchronously "https://btc-e.com/api/2/btc_eur/ticker") nil)
  call-interactively(eval-expression nil nil)
  command-execute(eval-expression)
--8<---------------cut here---------------end--------------->8---


Output of "gnutls-cli -v":
--8<---------------cut here---------------start------------->8---
gnutls-cli 3.2.4
Copyright (C) 2000-2012 Free Software Foundation, all rights reserved.
This is free software. It is licensed for use, modification and
redistribution under the terms of the
GNU General Public License, version 3 or later
    <http://gnu.org/licenses/gpl.html>
Please send bug reports to:  <bug-gnutls@gnu.org>
--8<---------------cut here---------------end--------------->8---


Output of "gnutls-cli btc-e.com":
--8<---------------cut here---------------start------------->8---
Processed 150 CA certificate(s).
Resolving 'btc-e.com'...
Connecting to '141.101.121.194:443'...
- Certificate type: X.509
- Got a certificate list of 2 certificates.
- Certificate[0] info:
 - subject `OU=Domain Control Validated,CN=*.btc-e.com', issuer `C=US,ST=Arizona,L=Scottsdale,O=GoDaddy.com\, Inc.,OU=http://certs.godaddy.com/repository/,CN=Go Daddy Secure Certificate Authority - G2', RSA key 2048 bits, signed using RSA-SHA256, activated `2014-03-15 15:12:42 UTC', expires `2016-03-15 15:12:42 UTC', SHA-1 fingerprint `d2c7044cd27bb32fb0424f1239a49db86b0aabde'
	Public Key Id:
		e66d3115b21aa22025b78955f82efb29533e515e
	Public key's random art:
		+--[ RSA 2048]----+
		|. +o.     . .    |
		| *.o       o .   |
		|o +.  . . . .    |
		| . .....Eo .     |
		|   ..o .S o      |
		|  . + .o . o     |
		|   = .  . o      |
		|  + o.   .       |
		|   +o.           |
		+-----------------+

- Certificate[1] info:
 - subject `C=US,ST=Arizona,L=Scottsdale,O=GoDaddy.com\, Inc.,OU=http://certs.godaddy.com/repository/,CN=Go Daddy Secure Certificate Authority - G2', issuer `C=US,ST=Arizona,L=Scottsdale,O=GoDaddy.com\, Inc.,CN=Go Daddy Root Certificate Authority - G2', RSA key 2048 bits, signed using RSA-SHA256, activated `2011-05-03 07:00:00 UTC', expires `2031-05-03 07:00:00 UTC', SHA-1 fingerprint `27ac9369faf25207bb2627cefaccbe4ef9c319b8'
- Status: The certificate is trusted. 
- Description: (TLS1.2-PKIX)-(ECDHE-RSA-SECP256R1)-(AES-128-GCM)-(AEAD)
- Session ID: 98:0F:B8:DC:1A:66:6B:E6:71:85:32:82:B4:7B:90:A8:D4:62:D8:0F:00:8C:09:69:B4:36:34:0A:E2:63:F0:EE
- Ephemeral EC Diffie-Hellman parameters
 - Using curve: SECP256R1
 - Curve size: 256 bits
- Version: TLS1.2
- Key Exchange: ECDHE-RSA
- Server Signature: RSA-SHA512
- Cipher: AES-128-GCM
- MAC: AEAD
- Compression: NULL
- Handshake was completed

- Simple Client Mode:

- Peer has closed the GnuTLS connection
--8<---------------cut here---------------end--------------->8---


Further information:

--8<---------------cut here---------------start------------->8---
In GNU Emacs 24.3.50.2 (x86_64-suse-linux-gnu, GTK+ Version 3.10.4)
 of 2014-03-16 on micropit
Repository revision: 116774 rudalics@gmx.at-20140316092658-lcj8z20iwmnoshm3
Windowing system distributor `The X.Org Foundation', version 11.0.11403901
System Description:	openSUSE 13.1 (Bottle) (x86_64)

Configured using:
 `configure --without-toolkit-scroll-bars'

Important settings:
  value of $LC_CTYPE: en_GB.utf8
  value of $XMODIFIERS: @im=ibus
  locale-coding-system: utf-8-unix

Features:
(shadow dabbrev emacsbug url-http url-gw url-auth shr mm-archive nnir
mailalias bbdb-message gnus-html browse-url url-cache mm-url
vc-dispatcher vc-svn org-rmail org-mhe org-irc org-info org-gnus
org-docview org-bibtex bibtex org-bbdb org-w3m sort smiley gnus-cite
mail-extr gnus-async gnus-bcklg qp gnus-salt gnus-ml disp-table
mule-util gnutls network-stream starttls bbdb-gnus bbdb-mua bbdb-com crm
gnus-delay gnus-draft nndraft nnmh nnml gnus-agent gnus-srvr gnus-score
score-mode nnvirtual gnus-msg gnus-cache gnus-art mm-uu mml2015
epg-config mm-view mml-smime smime dig gnus-icalendar org-capture
gnus-sum icalendar diary-lib diary-loaddefs gnus-demon nntp gnus-group
gnus-undo json gnus-start gnus-cloud nnimap nnmail mail-source tls utf7
netrc nnoo parse-time gnus-spec gnus-int gnus-range message sendmail
dired rfc822 mml mml-sec mm-decode mm-bodies mm-encode mail-parse
rfc2231 rfc2047 rfc2045 ietf-drums mailabbrev gmm-utils mailheader
gnus-win gnus gnus-ems gnus-compat url url-proxy url-privacy url-expand
url-methods url-history url-cookie url-domsuf url-util url-parse
auth-source eieio eieio-core password-cache url-vars mailcap nnheader
gnus-util mail-utils mm-util mail-prsvr wid-edit shell-pop notifications
dbus xml wombat-theme savehist paren delsel server org-clock bbdb
bbdb-site timezone lua-mode edmacro kmacro rx org-notify org-element org
byte-opt bytecomp byte-compile cconv advice help-fns org-macro
org-footnote org-pcomplete pcomplete org-list org-faces org-entities
noutline outline easy-mmode org-version ob-emacs-lisp ob ob-tangle
org-src ob-ref ob-lob ob-table ob-keys ob-exp ob-comint ob-core ob-eval
org-compat org-macs org-loaddefs format-spec find-func cal-menu calendar
cal-loaddefs slime-autoloads bbdb-loaddefs tex-site auto-loads gnus-load
autoinsert compile comint ansi-color po-mode cl-macs gv php-mode derived
etags ring cc-langs cl cl-loaddefs cl-lib cc-mode cc-fonts cc-guess
cc-menus cc-cmds cc-styles cc-align cc-engine cc-vars cc-defs speedbar
sb-image ezimage dframe easymenu time-date tooltip electric uniquify
ediff-hook vc-hooks lisp-float-type mwheel x-win x-dnd tool-bar dnd
fontset image regexp-opt fringe tabulated-list newcomment lisp-mode
prog-mode register page menu-bar rfn-eshadow timer select scroll-bar
mouse jit-lock font-lock syntax facemenu font-core frame cham georgian
utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao korean
japanese hebrew greek romanian slovak czech european ethiopic indian
cyrillic chinese case-table epa-hook jka-cmpr-hook help simple abbrev
minibuffer nadvice loaddefs button faces cus-face macroexp files
text-properties overlay sha1 md5 base64 format env code-pages mule
custom widget hashtable-print-readable backquote make-network-process
dbusbind gfilenotify dynamic-setting system-font-setting
font-render-setting move-toolbar gtk x-toolkit x multi-tty emacs)
--8<---------------cut here---------------end--------------->8---


How could I solve this problem please?

TIA for any hints,
-- 
           Peter

bug#17029: output of "curl -v"

[Peter Münster]

Hi,

Here is the output of https://btc-e.com/api/2/btc_eur/ticker :

--8<---------------cut here---------------start------------->8---
* Adding handle: conn: 0x111ff20
* Adding handle: send: 0
* Adding handle: recv: 0
* Curl_addHandleToPipeline: length: 1
* - Conn 0 (0x111ff20) send_pipe: 1, recv_pipe: 0
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
.  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0* About to connect() to btc-e.com port 443 (#0)
*   Trying 141.101.121.193...
* Connected to btc-e.com (141.101.121.193) port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /etc/ssl/certs/
* SSLv3, TLS handshake, Client hello (1):
} [data not shown]
* SSLv3, TLS handshake, Server hello (2):
{ [data not shown]
* SSLv3, TLS handshake, CERT (11):
{ [data not shown]
* SSLv3, TLS handshake, Server key exchange (12):
{ [data not shown]
* SSLv3, TLS handshake, Server finished (14):
{ [data not shown]
* SSLv3, TLS handshake, Client key exchange (16):
} [data not shown]
* SSLv3, TLS change cipher, Client hello (1):
} [data not shown]
* SSLv3, TLS handshake, Finished (20):
} [data not shown]
* SSLv3, TLS change cipher, Client hello (1):
{ [data not shown]
* SSLv3, TLS handshake, Finished (20):
{ [data not shown]
* SSL connection using ECDHE-RSA-AES128-GCM-SHA256
* Server certificate:
* 	 subject: OU=Domain Control Validated; CN=*.btc-e.com
* 	 start date: 2014-03-15 15:12:42 GMT
* 	 expire date: 2016-03-15 15:12:42 GMT
* 	 subjectAltName: btc-e.com matched
* 	 issuer: C=US; ST=Arizona; L=Scottsdale; O=GoDaddy.com, Inc.; OU=http://certs.godaddy.com/repository/; CN=Go Daddy Secure Certificate Authority - G2
* 	 SSL certificate verify ok.
> GET /api/2/btc_eur/ticker HTTP/1.1.
> User-Agent: curl/7.32.0.
> Host: btc-e.com.
> Accept: */*.
> .
< HTTP/1.1 200 OK.
* Server cloudflare-nginx is not blacklisted
< Server: cloudflare-nginx.
< Date: Tue, 18 Mar 2014 12:04:53 GMT.
< Content-Type: text/html; charset=utf-8.
< Transfer-Encoding: chunked.
< Connection: keep-alive.
< Set-Cookie: __cfduid=d269982b5e43268e8c6337d78a075dc081395144293868; expires=Mon, 23-Dec-2019 23:50:00 GMT; path=/; domain=.btc-e.com; HttpOnly.
< X-Frame-Options: DENY.
< Expires: Thu, 01 Jan 1970 00:00:01 GMT.
< Cache-Control: no-cache.
< CF-RAY: 10d14b9ca74e0ae4-WAW.
< .
{ [data not shown]
.100   180    0   180    0     0    395      0 --:--:-- --:--:-- --:--:--   396
* Connection #0 to host btc-e.com left intact
{"ticker":{"high":450.51999,"low":436.54001,"avg":443.53,"vol":54642.46029,"vol_cur":123.32814,"last":437,"buy":439.49985,"sell":437,"updated":1395144293,"server_time":1395144293}}
--8<---------------cut here---------------end--------------->8---

Regards,
-- 
           Peter

bug#17029: output of "curl -v"

[Peter Münster]

Hi,

Since about one hour, it works again!

In fact I have a timer, that invokes about once per 20 minutes the
url-retrieve-synchronously function. And suddenly, it works again. I
don't know why. The output of curl and gnutls-cli does not change
significantly (only session-id).

Perhaps it just depends on the day-time?  ;)

-- 
           Peter

bug#17029: output of "curl -v"

[Peter Münster]

On Tue, Mar 18 2014, Peter Münster wrote:

> Since about one hour, it works again!

The error is back. :(

Very strange...

-- 
           Peter

bug#17029: output of "curl -v"

[Ted Zlatanov]

On Tue, 18 Mar 2014 23:14:24 +0100 Peter Münster <pmlists@free.fr> wrote: 

PM> On Tue, Mar 18 2014, Peter Münster wrote:
>> Since about one hour, it works again!

PM> The error is back. :(

PM> Very strange...

I can't replicate this error on Ubuntu 13.10 using the latest build.  I
must suspect something is wonky either in your setup or between you and
the server, or with the server itself (maybe the round-robin is picking
a badly configured server).  If it only happens to this one host and
only for you, I would ask that we close this bug, so we need a confirmation.

Thanks
Ted

bug#17029: output of "curl -v"

[Peter Münster]

On Thu, Mar 20 2014, Ted Zlatanov wrote:

> I can't replicate this error on Ubuntu 13.10 using the latest build.  I
> must suspect something is wonky either in your setup or between you and
> the server, or with the server itself (maybe the round-robin is picking
> a badly configured server).  If it only happens to this one host and
> only for you, I would ask that we close this bug, so we need a confirmation.

It seems, that it happens only to this one host.

And it seems also, that it is not emacs-related: I've downgraded gnutls
to version 3.0.28 and now it works fine. Perhaps a bug in gnutls-3.2.4?

-- 
           Peter

bug#17029: output of "curl -v"

[Ted Zlatanov]

On Thu, 20 Mar 2014 14:48:37 +0100 Peter Münster <pmlists@free.fr> wrote: 

PM> On Thu, Mar 20 2014, Ted Zlatanov wrote:
>> I can't replicate this error on Ubuntu 13.10 using the latest build.  I
>> must suspect something is wonky either in your setup or between you and
>> the server, or with the server itself (maybe the round-robin is picking
>> a badly configured server).  If it only happens to this one host and
>> only for you, I would ask that we close this bug, so we need a confirmation.

PM> It seems, that it happens only to this one host.

PM> And it seems also, that it is not emacs-related: I've downgraded gnutls
PM> to version 3.0.28 and now it works fine. Perhaps a bug in gnutls-3.2.4?

Yes, very strange.  I suggest asking the server administrators.  Sorry I
don't have a good answer for you, and thank you for the thorough bug
report.

Marking as done.

Ted

bug#17029: output of "curl -v"

[Peter Münster]

On Tue, Mar 25 2014, Peter Münster wrote:

> When I find something, I'll report it on debbugs.

I believe, that I won't have enough time the next months to investigate
further. I hope that openSUSE developers can reproduce it and then fix
it: https://bugzilla.novell.com/show_bug.cgi?id=870456

-- 
           Peter