Your message dated Sat, 29 Oct 2016 17:48:52 +0000
with message-id <e1c0xks-0005ku...@fasolo.debian.org>
and subject line Bug#841723: fixed in gnutls28 3.5.5-5
has caused the Debian Bug report #841723,
regarding GnuTLS 3.3.x client cannot talk to GnuTLS 3.5.5 server
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
841723: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=841723
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libgnutls30
Version: 3.5.5-2

After the upgrade of libgnutls30 from 3.5.4-2 to 3.5.5-2 I can't send mails 
with exim over STARTTLS.

On the client side (Debian Jessie) I get this error message:
> (gnutls_handshake): A TLS packet with unexpected length was received.

On the mailer side (Debian Stretch) I get this error message:
> (gnutls_handshake): Error in the pull function.

No further errors were logged.

STARTTLS is configured in exim.

I'm using strong ciphers and 2048 bits DH parameters:
> tls_require_ciphers = SECURE128:+SECURE192:!VERS-SSL3.0
> tls_dhparam = /etc/custom/dhparams_2048.pem

Neither removing the parameters, nor further changes solved the problem.

Only downgrading to version 3.5.4-2 solved the problem for me.

Maybe something related to the combination exim4-daemon-heavy                   
4.87-3+b1 and libgnutls30 3.5.5-2?

--- End Message ---
--- Begin Message ---
Source: gnutls28
Source-Version: 3.5.5-5

We believe that the bug you reported is fixed in the latest version of
gnutls28, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 841...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andreas Metzler <ametz...@debian.org> (supplier of updated gnutls28 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 29 Oct 2016 18:03:49 +0200
Source: gnutls28
Binary: libgnutls28-dev libgnutls30 gnutls-bin gnutls-doc libgnutlsxx28 
libgnutls-openssl27
Architecture: source
Version: 3.5.5-5
Distribution: experimental
Urgency: medium
Maintainer: Debian GnuTLS Maintainers <pkg-gnutls-ma...@lists.alioth.debian.org>
Changed-By: Andreas Metzler <ametz...@debian.org>
Closes: 841723
Description: 
 gnutls-bin - GNU TLS library - commandline utilities
 gnutls-doc - GNU TLS library - documentation and examples
 libgnutls28-dev - GNU TLS library - development files
 libgnutls30 - GNU TLS library - main runtime library
 libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper
 libgnutlsxx28 - GNU TLS library - C++ runtime library
Changes:
 gnutls28 (3.5.5-5) experimental; urgency=medium
 .
   * 41_Reverted-the-behavior-of-sending-a-status-request-ex.patch from
     https://gitlab.com/gnutls/gnutls/merge_requests/128 - Fix compatibility
     issue with GnuTLS 3.3 clients. Closes: #841723
   * Bump symbol dependency info for multiple
     gnutls_certificate_(set|get)_*_key* functions. If
     %GNUTLS_CERTIFICATE_API_V2 is set these functions will return a
     non-negative return code on success instead of 0 for success and negative
     numbers for failure.
   * Add b-d on openssl (for testsuite).
Checksums-Sha1: 
 353b6fc81714891618233b2710720dc503c6ff71 3138 gnutls28_3.5.5-5.dsc
 76661e934b78aefedef17c5e018cac961307a36c 104148 gnutls28_3.5.5-5.debian.tar.xz
Checksums-Sha256: 
 464de1283a49c4a89d1250c2d84a1f8a9cc583521e5780bb832d78171f88e330 3138 
gnutls28_3.5.5-5.dsc
 852ef52ba325fa025de0dce7ed6765df2109272267c8bd5d55f2439664466158 104148 
gnutls28_3.5.5-5.debian.tar.xz
Files: 
 8f1b155132cf30af2b88129858a7340a 3138 libs optional gnutls28_3.5.5-5.dsc
 ae278e667ee1a77d53dc8a2224d24157 104148 libs optional 
gnutls28_3.5.5-5.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=uGh2
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to