Debian Bug report logs - #786512
curl: fails on non-fatal TLS warning

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Dmitry Smirnov <onlyjob@debian.org>

To: submit@bugs.debian.org

Subject: curl: fails on non-fatal TLS warning

Date: Fri, 22 May 2015 22:29:16 +1000

[Message part 1 (text/plain, inline)]

Package: curl
Version: 7.42.1-2
Severity: normal
X-Debbugs-CC: arno.schneider@hs-augsburg.de

Command

    curl https://moodle.hs-augsburg.de/

returns the following error:

~~~~
curl: (51) gnutls_handshake() warning: The server name sent was not recognized
~~~~

Quick searching suggests that it might be a GNUTLS-related regression (it was 
working properly on curl-7.38.0-4+deb8u2) similar to #731287 in "wget".

Worth noticing that command 

    wget https://moodle.hs-augsburg.de/

emits the following warning but succeeds:

~~~~
GnuTLS: A TLS warning alert has been received.
GnuTLS: received alert [112]: The server name sent was not recognized
~~~~

I found about this problem during attempt to monitor HTTPS-secured web site in 
Zabbix so apparently "libcurl4-gnutls" is also affected.

-- 
All the best,
 Dmitry Smirnov

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 786512@bugs.debian.org (full text, mbox, reply):

From: Alessandro Ghedini <ghedo@debian.org>

To: Dmitry Smirnov <onlyjob@debian.org>, 786512@bugs.debian.org

Subject: Re: Bug#786512: curl: fails on non-fatal TLS warning

Date: Sat, 23 May 2015 13:13:10 +0200

[Message part 1 (text/plain, inline)]

Control: tags -1 fixed-upstream

On Fri, May 22, 2015 at 10:29:16PM +1000, Dmitry Smirnov wrote:
> Package: curl
> Version: 7.42.1-2
> Severity: normal
> X-Debbugs-CC: arno.schneider@hs-augsburg.de
> 
> Command
> 
>     curl https://moodle.hs-augsburg.de/
> 
> returns the following error:
> 
> ~~~~
> curl: (51) gnutls_handshake() warning: The server name sent was not recognized
> ~~~~
> 
> Quick searching suggests that it might be a GNUTLS-related regression (it was 
> working properly on curl-7.38.0-4+deb8u2) similar to #731287 in "wget".
> 
> Worth noticing that command 
> 
>     wget https://moodle.hs-augsburg.de/
> 
> emits the following warning but succeeds:
> 
> ~~~~
> GnuTLS: A TLS warning alert has been received.
> GnuTLS: received alert [112]: The server name sent was not recognized
> ~~~~
> 
> I found about this problem during attempt to monitor HTTPS-secured web site in 
> Zabbix so apparently "libcurl4-gnutls" is also affected.

Yup, this issue has been fixed upstream a few days ago [0].

Cheers

[0] https://github.com/bagder/curl/commit/d5aab55b3353bec1d34a2e1434399d23db79b254

[signature.asc (application/pgp-signature, inline)]

Message #23 received at 786512-done@bugs.debian.org (full text, mbox, reply):

From: Alessandro Ghedini <ghedo@debian.org>

To: Dmitry Smirnov <onlyjob@debian.org>, 786512-done@bugs.debian.org

Subject: Re: Bug#786512: curl: fails on non-fatal TLS warning

Date: Mon, 6 Jul 2015 18:19:57 +0200

[Message part 1 (text/plain, inline)]

Version: 7.43.0-1

On Fri, May 22, 2015 at 10:29:16PM +1000, Dmitry Smirnov wrote:
> Package: curl
> Version: 7.42.1-2
> Severity: normal
> X-Debbugs-CC: arno.schneider@hs-augsburg.de
> 
> Command
> 
>     curl https://moodle.hs-augsburg.de/
> 
> returns the following error:
> 
> ~~~~
> curl: (51) gnutls_handshake() warning: The server name sent was not recognized
> ~~~~
> 
> Quick searching suggests that it might be a GNUTLS-related regression (it was 
> working properly on curl-7.38.0-4+deb8u2) similar to #731287 in "wget".

I forgot to close this, but it should be fixed as of the 7.43.0-1 upload.

Cheers

[signature.asc (application/pgp-signature, inline)]

Message #28 received at 786512@bugs.debian.org (full text, mbox, reply):

From: Dmitry Smirnov <onlyjob@debian.org>

To: Alessandro Ghedini <ghedo@debian.org>

Cc: 786512@bugs.debian.org

Subject: Re: Bug#786512: curl: fails on non-fatal TLS warning

Date: Thu, 09 Jul 2015 12:32:13 +1000

[Message part 1 (text/plain, inline)]

On Mon, 6 Jul 2015 18:19:57 Alessandro Ghedini wrote:
> I forgot to close this, but it should be fixed as of the 7.43.0-1 upload.

Thanks, Alessandro. I was looking forward to have this problem fixed.
It is much better now. :)

-- 
Best wishes,
 Dmitry Smirnov.

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.