touch-packages team mailing list archive

[Dimitri John Ledkov <launchpad@xxxxxxxxxxxx>]

This will need further investigations / tests as to what is the problem
in the TLS protocol.

It's most likely not git specific but rather TLS implementation specific
- that is one can recompile curl utility against (openssl, gnutls, nss)
to verify with each one that lts access works.

We cannot recompile git against openssl, as git & openssl licenses are
believed to be incompatible (and git does not have openssl link
exception).

I'm assigning this bug report against gnutls for now.

Based on the description it should be reproducible simply by trying to
retrieve https://git.fedorahosted.org/git/lvm2.git/info/refs

(Which is the first URL git fetches over HTTPS when trying to clone a
repository over https)


** Also affects: gnutls28 (Ubuntu)
   Importance: Undecided
       Status: New

** Also affects: gnutls26 (Ubuntu)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to gnutls26 in Ubuntu.
https://bugs.launchpad.net/bugs/1397685

Title:
  git gnutls_handshake() failed: A TLS packet with unexpected length was
  received.

Status in git package in Ubuntu:
  New
Status in gnutls26 package in Ubuntu:
  New
Status in gnutls28 package in Ubuntu:
  New

Bug description:
  Platform: Ubuntu 14.04, ppc64le (Power 8 LE), git version: 1:1.9.1-1
  When accessing a public repository over HTTPS, I get the following error:
  $ git clone --no-checkout https://git.fedorahosted.org/git/lvm2.git lvm2
  Cloning into 'lvm2'...
  fatal: unable to access 'https://git.fedorahosted.org/git/lvm2.git/': gnutls_handshake() failed: A TLS packet with unexpected length was received.

  Accessing the same public repository from a different machine running
  in a different network - also Ubuntu 14.04, but running on x86-64, the
  commands executed with no errors. Both platforms have the same git
  version (dpkg -l | grep git)

  I checked online for an explanation. Found this:
  http://askubuntu.com/questions/186847/error-gnutls-handshake-falied-when-connecting-to-https-servers

  According to that, Gnu TLS may have some issues when proxies
  (firewalls?) are present on the network path to the repositories. The
  recommended solution is to rebuild git using OpenSSL instead of TLS. I
  tried it and got to a different error ("Unknown SSL protocol error").

  Can you please fix git to make it work correctly?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/git/+bug/1397685/+subscriptions