unofficial mirror of emacs-devel@gnu.org 
 help / color / mirror / code / Atom feed
From: Paul Pogonyshev <pogonyshev@gmail.com>
To: Noam Postavsky <npostavs@gmail.com>
Cc: Emacs developers <emacs-devel@gnu.org>
Subject: Re: GNU Elpa and Emacs 25.3
Date: Sat, 15 Feb 2020 22:05:32 +0100	[thread overview]
Message-ID: <CAG7Bpaom2+=bCUQqy_8xx5W=yRb3SpEcbBnkTx69ngZ6vOPE1g@mail.gmail.com> (raw)
In-Reply-To: <CAM-tV-_P1wsS6Wbg6eZbVGh3BDiaX0KVg7p4YD-ty+42brTfNA@mail.gmail.com>

[-- Attachment #1: Type: text/plain, Size: 2322 bytes --]

Sorry to bother again, but now I run into a different problem with this. I
set `gnutls-algorithm-priority' to "NORMAL:-VERS-TLS1.3" as suggested in
that bugreport. This does work fine locally. However, when I use the same
code on Travis CI for automated testing, I get the following error:

     gnutls.c: [1] (Emacs) connecting to host: stable.melpa.org
     gnutls.c: [1] (Emacs) allocating credentials
     gnutls.c: [2] (Emacs) allocating x509 credentials
     gnutls.c: [2] (Emacs) using default verification flags
     gnutls.c: [1] (Emacs) setting the trustfile:
 /etc/ssl/certs/ca-certificates.crt
     gnutls.c: [1] (Emacs) gnutls callbacks
     gnutls.c: [1] (Emacs) gnutls_init
     gnutls.c: [1] (Emacs) got non-default priority string:
NORMAL:-VERS-TLS1.3
     gnutls.c: [1] (Emacs) setting the priority string
     gnutls.c: [2] ASSERT: gnutls_priority.c:832

     gnutls.el: (err=[-50] The request is invalid.) boot: (:priority
NORMAL:-VERS-TLS1.3 :hostname stable.melpa.org :loglevel 2 :min-prime-bits
256 :trustfiles (/etc/ssl/certs/ca-certificates.crt) :crlfiles nil :keylist
nil :verify-flags nil :verify-error nil :callbacks nil)
     Package refresh done
     Debugger entered--Lisp error: (gnutls-error #<process stable.melpa.org<1>>
-50)
       signal(gnutls-error (#<process stable.melpa.org<1>> -50))

Travis CI (Ubuntu distribution Trusty) has an ancient GnuTLS version
2.12.6. As far as I understand, it doesn't know about TLS1.3 and therefore
the attempt to disable it fails.

Is there a way to use "NORMAL:-VERS-TLS1.3" in "do not fail" mode? Maybe I
could somehow query if the library knows about 1.3 first?

Paul

On Sat, 25 Jan 2020 at 16:33, Noam Postavsky <npostavs@gmail.com> wrote:

> On Sat, 25 Jan 2020 at 09:55, Paul Pogonyshev <pogonyshev@gmail.com>
> wrote:
> >
> >     (file-error "https://elpa.gnu.org/packages/archive-contents" "Bad
> Request")
> >
> > for me.  Also fails if I replace "https" with "http" in the command,
> > though with a different error.
>
> The https failure is Bug#36749, though I'm surprised to hear that it
> fails with plain http as well.
>
> > * The command with different Emacs version: 24.5, 26.3 and 28.0.50
> >   (trunk).
>
> Is your 24.5 Emacs linked against an older version of libgnutls?
> Otherwise I would expect it to have the same problem.
>

[-- Attachment #2: Type: text/html, Size: 3279 bytes --]

  parent reply	other threads:[~2020-02-15 21:05 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-01-25 14:54 GNU Elpa and Emacs 25.3 Paul Pogonyshev
2020-01-25 15:33 ` Noam Postavsky
2020-01-25 15:48   ` Paul Pogonyshev
2020-01-25 20:05     ` Noam Postavsky
2020-01-25 20:37       ` Paul Pogonyshev
2020-02-15 21:05   ` Paul Pogonyshev [this message]
2020-02-16 12:52     ` Paul Pogonyshev
2020-02-26  1:15       ` Noam Postavsky

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

  List information: https://www.gnu.org/software/emacs/

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to='CAG7Bpaom2+=bCUQqy_8xx5W=yRb3SpEcbBnkTx69ngZ6vOPE1g@mail.gmail.com' \
    --to=pogonyshev@gmail.com \
    --cc=emacs-devel@gnu.org \
    --cc=npostavs@gmail.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/emacs.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).