weird gnutls issue on OSX

weird gnutls issue on OSX

[Yann Hodique]

[-- Attachment #1: Type: text/plain, Size: 2031 bytes --]

Hi,

there seems to be an "interesting" issue going on around gnutls in the
master branch, at least for OSX.
https://github.com/sigma/gh.el/issues/73 provides some backstory

but the short of it is this: with gnutls enabled,
(url-retrieve-synchronously "https://www.gnu.org") doesn't work, while
(url-retrieve-synchronously "https://www.google.com") does.

And what's worse, when it fails, it fails pretty silently. Which
generates some confusion.
(btw, without gnutls everything's fine)

The relevant part of the gnutls.c logs reads:

,----
| Contacting host: www.gnu.org:443
| gnutls.c: [1] (Emacs) connecting to host: www.gnu.org
| gnutls.c: [1] (Emacs) allocating credentials
| gnutls.c: [2] (Emacs) allocating x509 credentials
| gnutls.c: [2] (Emacs) using default verification flags
| gnutls.c: [audit] There was a non-CA certificate in the trusted list: O=Entrust.
| 
| gnutls.c: [1] (Emacs) setting the trustfile:  /etc/ssl/certs/ca-certificates.crt
| gnutls.c: [audit] There was a non-CA certificate in the trusted list: O=Entrust.
| 
| gnutls.c: [1] (Emacs) gnutls callbacks
| gnutls.c: [1] (Emacs) gnutls_init
| gnutls.c: [1] (Emacs) got non-default priority string: NORMAL
| gnutls.c: [1] (Emacs) setting the priority string
| gnutls.c: [audit] Note that the security level of the Diffie-Hellman key exchang
| 
| gnutls.c: [2] WRITE: -1 returned from 0x9, errno: 57
| 
| gnutls.c: [1] (Emacs) fatal error: Error in the push function.
`----

Attached are the logs for the following commands:

$ /usr/local/bin/emacs -q --batch --eval '(progn (setq gnutls-log-level 2) (with-current-buffer (url-retrieve-synchronously "https://www.gnu.org") (princ (buffer-string))))' > gnu.log 2>&1

$ /usr/local/bin/emacs -q --batch --eval '(progn (setq gnutls-log-level 2) (with-current-buffer (url-retrieve-synchronously "https://www.google.com") (princ (buffer-string))))'

Does that ring any bell?

Thanks

Yann.

-- 
There are weapons you cannot hold in your hand.
You can only hold them in your mind.

  -- Bene Gesserit Teaching

[-- Attachment #2: google.log.gz --]
[-- Type: application/octet-stream, Size: 5162 bytes --]

[-- Attachment #3: gnu.log.gz --]
[-- Type: application/octet-stream, Size: 2567 bytes --]

Re: weird gnutls issue on OSX

[Noam Postavsky]

On Wed, Jun 29, 2016 at 12:51 PM, Yann Hodique <yann.hodique@gmail.com> wrote:
> there seems to be an "interesting" issue going on around gnutls in the
> master branch, at least for OSX.
> https://github.com/sigma/gh.el/issues/73 provides some backstory
>
> but the short of it is this: with gnutls enabled,
> (url-retrieve-synchronously "https://www.gnu.org") doesn't work, while
> (url-retrieve-synchronously "https://www.google.com") does.

It sounds like http://debbugs.gnu.org/cgi/bugreport.cgi?bug=22929,
http://debbugs.gnu.org/cgi/bugreport.cgi?bug=23225, or
http://debbugs.gnu.org/cgi/bugreport.cgi?bug=23503

Re: weird gnutls issue on OSX

[Eli Zaretskii]

> From: Yann Hodique <yann.hodique@gmail.com>
> Date: Wed, 29 Jun 2016 09:51:23 -0700
> 
> there seems to be an "interesting" issue going on around gnutls in the
> master branch, at least for OSX.
> https://github.com/sigma/gh.el/issues/73 provides some backstory
> 
> but the short of it is this: with gnutls enabled,
> (url-retrieve-synchronously "https://www.gnu.org") doesn't work, while
> (url-retrieve-synchronously "https://www.google.com") does.

FWIW, both work on MS-Windows with the latest master.

Re: weird gnutls issue on OSX

[Yann Hodique]

>>>>> "Noam" == Noam Postavsky <npostavs@users.sourceforge.net> writes:

> On Wed, Jun 29, 2016 at 12:51 PM, Yann Hodique <yann.hodique@gmail.com> wrote:
>> there seems to be an "interesting" issue going on around gnutls in the
>> master branch, at least for OSX.
>> https://github.com/sigma/gh.el/issues/73 provides some backstory
>> 
>> but the short of it is this: with gnutls enabled,
>> (url-retrieve-synchronously "https://www.gnu.org") doesn't work, while
>> (url-retrieve-synchronously "https://www.google.com") does.

> It sounds like http://debbugs.gnu.org/cgi/bugreport.cgi?bug=22929,
> http://debbugs.gnu.org/cgi/bugreport.cgi?bug=23225, or
> http://debbugs.gnu.org/cgi/bugreport.cgi?bug=23503

yep, definitely looks exactly like 23225. Thanks for pointing it out !

Yann.

-- 
Heaven must be the sound of running water.

  -- Fremen Saying

Re: weird gnutls issue on OSX

[thierry]

On 29/06/2016 20:00, Noam Postavsky wrote:
> On Wed, Jun 29, 2016 at 12:51 PM, Yann Hodique <yann.hodique@gmail.com> wrote:
>> there seems to be an "interesting" issue going on around gnutls in the
>> master branch, at least for OSX.
>> https://github.com/sigma/gh.el/issues/73 provides some backstory
>>
>> but the short of it is this: with gnutls enabled,
>> (url-retrieve-synchronously "https://www.gnu.org") doesn't work, while
>> (url-retrieve-synchronously "https://www.google.com") does.
>
> It sounds like http://debbugs.gnu.org/cgi/bugreport.cgi?bug=22929,
> http://debbugs.gnu.org/cgi/bugreport.cgi?bug=23225, or
> http://debbugs.gnu.org/cgi/bugreport.cgi?bug=23503
>
>
And also bug#23782

Re: weird gnutls issue on OSX

[Noam Postavsky]

On Wed, Jun 29, 2016 at 11:44 PM, thierry <thierry.volpiatto@gmail.com> wrote:
> On 29/06/2016 20:00, Noam Postavsky wrote:
>>
>> On Wed, Jun 29, 2016 at 12:51 PM, Yann Hodique <yann.hodique@gmail.com>
>> wrote:
>>>
>>> there seems to be an "interesting" issue going on around gnutls in the
>>> master branch, at least for OSX.
>>> https://github.com/sigma/gh.el/issues/73 provides some backstory
>>>
>>> but the short of it is this: with gnutls enabled,
>>> (url-retrieve-synchronously "https://www.gnu.org") doesn't work, while
>>> (url-retrieve-synchronously "https://www.google.com") does.
>>
>>
>> It sounds like http://debbugs.gnu.org/cgi/bugreport.cgi?bug=22929,
>> http://debbugs.gnu.org/cgi/bugreport.cgi?bug=23225, or
>> http://debbugs.gnu.org/cgi/bugreport.cgi?bug=23503
>>
>>
> And also bug#23782
>

I think #23782 is different because you indicated gnutls-cli from
command line also failed. On the other bugs, it was only Emacs with
libgnutls that fails.