On 2011-08-20 "Andrew M. Bishop" <a...@gedanken.demon.co.uk> wrote: [...] > There seems to be a bug with gnutls on the latest Debian (version > 2.12.7-6 for me). Taking the example code from the gnutls > documentation and compiling it gives me an SSL server that will not > accept connections from Iceweasel, wget or the example client from the > same gnutls documentation.
> http://www.gnu.org/software/gnutls/manual/html_node/Echo-Server-with-X_002e509-authentication.html > http://www.gnu.org/software/gnutls/manual/html_node/Simple-client-example-with-X_002e509-certificate-support.html [...] > When run the server says: > | Server ready. Listening to port '5556'. > | > | - connection from 127.0.0.1, port 34901 > | *** Handshake has failed (Could not negotiate a supported cipher suite.) > and the client says: > | *** Handshake failed > | GnuTLS error: A TLS packet with unexpected length was received. [...] I have not wwoffle or its certificates installed, but the example code does work with 2.12.7-6. I have just ran it unmodified using an example certificate. - example-clientm gnutls-cli(-debug) and openssl s_client all managed to connect. I get the "Could not negotiate a supported cipher suite." if the example server cannot read/find/access the neccessary cert bit (ca, key and cert.) cu andreas -- `What a good friend you are to him, Dr. Maturin. His other friends are so grateful to you.' `I sew his ears on from time to time, sure' -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
