From: Leandro Facchinetti <me@leafac.com>
To: 20465@debbugs.gnu.org
Subject: bug#20465: 24.4; GnuTLS integration seems faulty
Date: Wed, 29 Apr 2015 15:34:56 -0400 [thread overview]
Message-ID: <87r3r24tjz.fsf@leafac.com> (raw)
I'm trying to retrieve a URL hosted on CloudFlare with Universal SSL
enabled (more about what's that here:
https://blog.cloudflare.com/introducing-universal-ssl/).
The following command is the one causing the issue:
(url-retrieve-synchronously "https://kill-the-newsletter.com")
As you can see on the "Recent messages" section of this bug report, I'm
getting back a -12 error, which by the GnuTLS manual means
"GNUTLS_E_FATAL_ALERT_RECEIVED: A TLS fatal alert has been received."
But then I tried connecting with the server using the `gnutls-cli' tool
provided by GnuTLS itself. From the command line, I ran:
$ gnutls-cli kill-the-newsletter.com
And it worked.
This leads me to conclude that somehow `gnutls.c' in Emacs is calling
the library in a way it shouldn't.
I'd love to help fix this myself, but I'm not experienced with C
programming outside the assignments I did as an undergrad a few years
ago, and I don't understand the internals of Emacs and GnuTLS very well.
So I ask you to please guide me on the right direction.
Thanks!
In GNU Emacs 24.4.1 (x86_64-unknown-linux-gnu, GTK+ Version 3.16.2)
of 2015-04-17 on andyrtr
Windowing system distributor `The X.Org Foundation', version 11.0.11701000
Configured using:
`configure --prefix=/usr --sysconfdir=/etc --libexecdir=/usr/lib
--localstatedir=/var --with-x-toolkit=gtk3 --with-xft
'CFLAGS=-march=x86-64 -mtune=generic -O2 -pipe -fstack-protector-strong
--param=ssp-buffer-size=4' CPPFLAGS=-D_FORTIFY_SOURCE=2
LDFLAGS=-Wl,-O1,--sort-common,--as-needed,-z,relro'
Important settings:
value of $LANG: en_US.utf8
locale-coding-system: utf-8-unix
Major mode: Lisp Interaction
Minor modes in effect:
tooltip-mode: t
electric-indent-mode: t
mouse-wheel-mode: t
tool-bar-mode: t
menu-bar-mode: t
file-name-shadow-mode: t
global-font-lock-mode: t
font-lock-mode: t
blink-cursor-mode: t
auto-composition-mode: t
auto-encryption-mode: t
auto-compression-mode: t
line-number-mode: t
transient-mark-mode: t
Recent input:
<help-echo> M-: C-g M-: ( C-y SPC " h t t p s : / /
k i l l - t h e - n e w s l e t t e r . c o m " ) <return>
q M-: <up> C-S-e M-w C-g M-x e m a s <backspace> c
s - r e p o <tab> <backspace> <backspace> <backspace>
<backspace> <backspace> <backspace> <backspace> <backspace>
<backspace> <backspace> r e p o <tab> r t <tab> <r
eturn>
Recent messages:
For information about GNU Emacs and the GNU system, type C-h C-a.
Quit
Contacting host: kill-the-newsletter.com:443
gnutls.c: [0] (Emacs) fatal error: A TLS fatal alert has been received.
gnutls.c: [0] (Emacs) Received alert: Internal error
gnutls.el: (err=[-12] A TLS fatal alert has been received.) boot: (:priority NORMAL :hostname kill-the-newsletter.com :loglevel 0 :min-prime-bits 256 :trustfiles (/etc/ssl/certs/ca-certificates.crt) :crlfiles nil :keylist nil :verify-flags nil :verify-error nil :callbacks nil)
Entering debugger...
Back to top level.
Quit
Making completion list...
Load-path shadows:
None found.
Features:
(shadow sort mail-extr emacsbug message format-spec rfc822 mml mml-sec
mm-decode mm-bodies mm-encode mailabbrev gmm-utils mailheader sendmail
mail-utils help-mode easymenu debug gnutls cl-loaddefs cl-lib
network-stream starttls url-http tls mail-parse rfc2231 rfc2047 rfc2045
ietf-drums url-gw url-cache url-auth url url-proxy url-privacy
url-expand url-methods url-history url-cookie url-domsuf url-util
url-parse auth-source eieio byte-opt bytecomp byte-compile cconv
eieio-core gnus-util mm-util help-fns mail-prsvr password-cache url-vars
mailcap time-date tooltip electric uniquify ediff-hook vc-hooks
lisp-float-type mwheel x-win x-dnd tool-bar dnd fontset image regexp-opt
fringe tabulated-list newcomment lisp-mode prog-mode register page
menu-bar rfn-eshadow timer select scroll-bar mouse jit-lock font-lock
syntax facemenu font-core frame cham georgian utf-8-lang misc-lang
vietnamese tibetan thai tai-viet lao korean japanese hebrew greek
romanian slovak czech european ethiopic indian cyrillic chinese
case-table epa-hook jka-cmpr-hook help simple abbrev minibuffer nadvice
loaddefs button faces cus-face macroexp files text-properties overlay
sha1 md5 base64 format env code-pages mule custom widget
hashtable-print-readable backquote make-network-process dbusbind
gfilenotify dynamic-setting system-font-setting font-render-setting
move-toolbar gtk x-toolkit x multi-tty emacs)
Memory information:
((conses 16 91117 5130)
(symbols 48 19938 0)
(miscs 40 45 118)
(strings 32 18371 4972)
(string-bytes 1 493143)
(vectors 16 11427)
(vector-slots 8 411227 6068)
(floats 8 74 213)
(intervals 56 245 1)
(buffers 960 13)
(heap 1024 38752 1009))
--
Leandro Facchinetti <me@leafac.com>
https://www.leafac.com
GPG key: 3DF3D583
next reply other threads:[~2015-04-29 19:34 UTC|newest]
Thread overview: 17+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-04-29 19:34 Leandro Facchinetti [this message]
2015-04-29 20:36 ` bug#20465: 24.4; GnuTLS integration seems faulty Andreas Schwab
2015-04-29 20:54 ` Leandro Facchinetti
2015-05-04 22:08 ` Ted Zlatanov
2015-05-05 0:43 ` Leandro Facchinetti
2015-05-05 0:52 ` Glenn Morris
2015-05-05 9:52 ` Ted Zlatanov
2015-05-05 10:39 ` Leandro Facchinetti
2015-05-05 10:50 ` Andreas Schwab
2015-04-29 20:48 ` Andreas Schwab
2015-05-04 22:08 ` Ted Zlatanov
2015-05-04 22:25 ` Andreas Schwab
2015-05-04 22:38 ` Ted Zlatanov
2015-05-05 0:40 ` Leandro Facchinetti
2015-05-05 14:15 ` Nicolas Richard
2015-05-05 14:28 ` Ted Zlatanov
[not found] ` <handler.20465.B.14303394254904.ack@debbugs.gnu.org>
2015-05-05 10:41 ` bug#20465: Acknowledgement (24.4; GnuTLS integration seems faulty) Leandro Facchinetti
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://www.gnu.org/software/emacs/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87r3r24tjz.fsf@leafac.com \
--to=me@leafac.com \
--cc=20465@debbugs.gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/emacs.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).