GNU bug report logs - #17029
24.3.50; gnutls-error

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 17029 in the body.
You can then email your comments to 17029 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Peter Münster <pmlists <at> free.fr>
To: bug-gnu-emacs <at> gnu.org
Subject: 24.3.50; gnutls-error
Date: Tue, 18 Mar 2014 01:01:36 +0100

Hi,

With the latest bzr-version (revno 116774), `url-retrieve-synchronously'
terminates with a gnutls-error:

--8<---------------cut here---------------start------------->8---
Contacting host: btc-e.com:443
gnutls.c: [0] (Emacs) fatal error: An unexpected TLS handshake packet was received.
gnutls.el: (err=[-19] An unexpected TLS handshake packet was received.) boot: (:priority NORMAL :hostname btc-e.com :loglevel 0 :min-prime-bits 256 :trustfiles (/etc/ssl/ca-bundle.pem) :crlfiles nil :keylist nil :verify-flags nil :verify-error nil :callbacks nil)
Entering debugger...
--8<---------------cut here---------------end--------------->8---

This is the test-command:
(url-retrieve-synchronously "https://btc-e.com/api/2/btc_eur/ticker")

And here the backtrace:

--8<---------------cut here---------------start------------->8---
Debugger entered--Lisp error: (gnutls-error #<process btc-e.com> -19)
  signal(gnutls-error (#<process btc-e.com> -19))
  gnutls-negotiate(:process #<process btc-e.com> :type gnutls-x509pki :hostname "btc-e.com")
  open-gnutls-stream("btc-e.com" #<buffer  *url-http-temp*> "btc-e.com" 443)
  network-stream-open-tls("btc-e.com" #<buffer  *url-http-temp*> "btc-e.com" 443 (:type tls :nowait t))
  open-network-stream("btc-e.com" #<buffer  *url-http-temp*> "btc-e.com" 443 :type tls :nowait t)
  byte-code("\306\211\n\307>\203$\n\310=\203\311\312
\313\n\314\315\316\317\"\202Y\n\320=\2034\321       \f
$\202Y\n\322=\203D\323                       \f
$\202Y\n\324=\203T\325\f
$\202Y\326\327\"*\306\207" [coding-system-for-write coding-system-for-read gw-method name buffer host binary (tls ssl native) native plain open-network-stream :type :nowait featurep make-network-process (:nowait t) socks socks-open-network-stream telnet url-open-telnet rlogin url-open-rlogin error "Bad setting of url-gateway-method: %s" service url-gateway-method conn] 11)
  url-open-stream("btc-e.com" #<buffer  *url-http-temp*> "btc-e.com" 443)
  url-http-find-free-connection("btc-e.com" 443)
  url-http([cl-struct-url "https" nil nil "btc-e.com" nil "/api/2/btc_eur/ticker" nil nil t nil t] #[128 "\302\303\304p#\210\300\305\240\210\301p\240\207" [(nil) (nil) url-debug retrieval "Synchronous fetching done (%S)" t] 5 "\n\n(fn &rest IGNORED)"] (nil))
  url-https([cl-struct-url "https" nil nil "btc-e.com" nil "/api/2/btc_eur/ticker" nil nil t nil t] #[128 "\302\303\304p#\210\300\305\240\210\301p\240\207" [(nil) (nil) url-debug retrieval "Synchronous fetching done (%S)" t] 5 "\n\n(fn &rest IGNORED)"] (nil))
  url-retrieve-internal("https://btc-e.com/api/2/btc_eur/ticker" #[128 "\302\303\304p#\210\300\305\240\210\301p\240\207" [(nil) (nil) url-debug retrieval "Synchronous fetching done (%S)" t] 5 "\n\n(fn &rest IGNORED)"] (nil) nil nil)
  url-retrieve("https://btc-e.com/api/2/btc_eur/ticker" #[128 "\302\303\304p#\210\300\305\240\210\301p\240\207" [(nil) (nil) url-debug retrieval "Synchronous fetching done (%S)" t] 5 "\n\n(fn &rest IGNORED)"] nil nil nil)
  url-retrieve-synchronously("https://btc-e.com/api/2/btc_eur/ticker")
  eval((url-retrieve-synchronously "https://btc-e.com/api/2/btc_eur/ticker") nil)
  eval-expression((url-retrieve-synchronously "https://btc-e.com/api/2/btc_eur/ticker") nil)
  call-interactively(eval-expression nil nil)
  command-execute(eval-expression)
--8<---------------cut here---------------end--------------->8---


Output of "gnutls-cli -v":
--8<---------------cut here---------------start------------->8---
gnutls-cli 3.2.4
Copyright (C) 2000-2012 Free Software Foundation, all rights reserved.
This is free software. It is licensed for use, modification and
redistribution under the terms of the
GNU General Public License, version 3 or later
    <http://gnu.org/licenses/gpl.html>
Please send bug reports to:  <bug-gnutls <at> gnu.org>
--8<---------------cut here---------------end--------------->8---


Output of "gnutls-cli btc-e.com":
--8<---------------cut here---------------start------------->8---
Processed 150 CA certificate(s).
Resolving 'btc-e.com'...
Connecting to '141.101.121.194:443'...
- Certificate type: X.509
- Got a certificate list of 2 certificates.
- Certificate[0] info:
 - subject `OU=Domain Control Validated,CN=*.btc-e.com', issuer `C=US,ST=Arizona,L=Scottsdale,O=GoDaddy.com\, Inc.,OU=http://certs.godaddy.com/repository/,CN=Go Daddy Secure Certificate Authority - G2', RSA key 2048 bits, signed using RSA-SHA256, activated `2014-03-15 15:12:42 UTC', expires `2016-03-15 15:12:42 UTC', SHA-1 fingerprint `d2c7044cd27bb32fb0424f1239a49db86b0aabde'
	Public Key Id:
		e66d3115b21aa22025b78955f82efb29533e515e
	Public key's random art:
		+--[ RSA 2048]----+
		|. +o.     . .    |
		| *.o       o .   |
		|o +.  . . . .    |
		| . .....Eo .     |
		|   ..o .S o      |
		|  . + .o . o     |
		|   = .  . o      |
		|  + o.   .       |
		|   +o.           |
		+-----------------+

- Certificate[1] info:
 - subject `C=US,ST=Arizona,L=Scottsdale,O=GoDaddy.com\, Inc.,OU=http://certs.godaddy.com/repository/,CN=Go Daddy Secure Certificate Authority - G2', issuer `C=US,ST=Arizona,L=Scottsdale,O=GoDaddy.com\, Inc.,CN=Go Daddy Root Certificate Authority - G2', RSA key 2048 bits, signed using RSA-SHA256, activated `2011-05-03 07:00:00 UTC', expires `2031-05-03 07:00:00 UTC', SHA-1 fingerprint `27ac9369faf25207bb2627cefaccbe4ef9c319b8'
- Status: The certificate is trusted. 
- Description: (TLS1.2-PKIX)-(ECDHE-RSA-SECP256R1)-(AES-128-GCM)-(AEAD)
- Session ID: 98:0F:B8:DC:1A:66:6B:E6:71:85:32:82:B4:7B:90:A8:D4:62:D8:0F:00:8C:09:69:B4:36:34:0A:E2:63:F0:EE
- Ephemeral EC Diffie-Hellman parameters
 - Using curve: SECP256R1
 - Curve size: 256 bits
- Version: TLS1.2
- Key Exchange: ECDHE-RSA
- Server Signature: RSA-SHA512
- Cipher: AES-128-GCM
- MAC: AEAD
- Compression: NULL
- Handshake was completed

- Simple Client Mode:

- Peer has closed the GnuTLS connection
--8<---------------cut here---------------end--------------->8---


Further information:

--8<---------------cut here---------------start------------->8---
In GNU Emacs 24.3.50.2 (x86_64-suse-linux-gnu, GTK+ Version 3.10.4)
 of 2014-03-16 on micropit
Repository revision: 116774 rudalics <at> gmx.at-20140316092658-lcj8z20iwmnoshm3
Windowing system distributor `The X.Org Foundation', version 11.0.11403901
System Description:	openSUSE 13.1 (Bottle) (x86_64)

Configured using:
 `configure --without-toolkit-scroll-bars'

Important settings:
  value of $LC_CTYPE: en_GB.utf8
  value of $XMODIFIERS: @im=ibus
  locale-coding-system: utf-8-unix

Features:
(shadow dabbrev emacsbug url-http url-gw url-auth shr mm-archive nnir
mailalias bbdb-message gnus-html browse-url url-cache mm-url
vc-dispatcher vc-svn org-rmail org-mhe org-irc org-info org-gnus
org-docview org-bibtex bibtex org-bbdb org-w3m sort smiley gnus-cite
mail-extr gnus-async gnus-bcklg qp gnus-salt gnus-ml disp-table
mule-util gnutls network-stream starttls bbdb-gnus bbdb-mua bbdb-com crm
gnus-delay gnus-draft nndraft nnmh nnml gnus-agent gnus-srvr gnus-score
score-mode nnvirtual gnus-msg gnus-cache gnus-art mm-uu mml2015
epg-config mm-view mml-smime smime dig gnus-icalendar org-capture
gnus-sum icalendar diary-lib diary-loaddefs gnus-demon nntp gnus-group
gnus-undo json gnus-start gnus-cloud nnimap nnmail mail-source tls utf7
netrc nnoo parse-time gnus-spec gnus-int gnus-range message sendmail
dired rfc822 mml mml-sec mm-decode mm-bodies mm-encode mail-parse
rfc2231 rfc2047 rfc2045 ietf-drums mailabbrev gmm-utils mailheader
gnus-win gnus gnus-ems gnus-compat url url-proxy url-privacy url-expand
url-methods url-history url-cookie url-domsuf url-util url-parse
auth-source eieio eieio-core password-cache url-vars mailcap nnheader
gnus-util mail-utils mm-util mail-prsvr wid-edit shell-pop notifications
dbus xml wombat-theme savehist paren delsel server org-clock bbdb
bbdb-site timezone lua-mode edmacro kmacro rx org-notify org-element org
byte-opt bytecomp byte-compile cconv advice help-fns org-macro
org-footnote org-pcomplete pcomplete org-list org-faces org-entities
noutline outline easy-mmode org-version ob-emacs-lisp ob ob-tangle
org-src ob-ref ob-lob ob-table ob-keys ob-exp ob-comint ob-core ob-eval
org-compat org-macs org-loaddefs format-spec find-func cal-menu calendar
cal-loaddefs slime-autoloads bbdb-loaddefs tex-site auto-loads gnus-load
autoinsert compile comint ansi-color po-mode cl-macs gv php-mode derived
etags ring cc-langs cl cl-loaddefs cl-lib cc-mode cc-fonts cc-guess
cc-menus cc-cmds cc-styles cc-align cc-engine cc-vars cc-defs speedbar
sb-image ezimage dframe easymenu time-date tooltip electric uniquify
ediff-hook vc-hooks lisp-float-type mwheel x-win x-dnd tool-bar dnd
fontset image regexp-opt fringe tabulated-list newcomment lisp-mode
prog-mode register page menu-bar rfn-eshadow timer select scroll-bar
mouse jit-lock font-lock syntax facemenu font-core frame cham georgian
utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao korean
japanese hebrew greek romanian slovak czech european ethiopic indian
cyrillic chinese case-table epa-hook jka-cmpr-hook help simple abbrev
minibuffer nadvice loaddefs button faces cus-face macroexp files
text-properties overlay sha1 md5 base64 format env code-pages mule
custom widget hashtable-print-readable backquote make-network-process
dbusbind gfilenotify dynamic-setting system-font-setting
font-render-setting move-toolbar gtk x-toolkit x multi-tty emacs)
--8<---------------cut here---------------end--------------->8---


How could I solve this problem please?

TIA for any hints,
-- 
           Peter

Message #8 received at 17029 <at> debbugs.gnu.org (full text, mbox):

From: Peter Münster <pmlists <at> free.fr>
To: 17029 <at> debbugs.gnu.org
Subject: output of "curl -v"
Date: Tue, 18 Mar 2014 13:08:33 +0100

Hi,

Here is the output of https://btc-e.com/api/2/btc_eur/ticker :

--8<---------------cut here---------------start------------->8---
* Adding handle: conn: 0x111ff20
* Adding handle: send: 0
* Adding handle: recv: 0
* Curl_addHandleToPipeline: length: 1
* - Conn 0 (0x111ff20) send_pipe: 1, recv_pipe: 0
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
.  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0* About to connect() to btc-e.com port 443 (#0)
*   Trying 141.101.121.193...
* Connected to btc-e.com (141.101.121.193) port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /etc/ssl/certs/
* SSLv3, TLS handshake, Client hello (1):
} [data not shown]
* SSLv3, TLS handshake, Server hello (2):
{ [data not shown]
* SSLv3, TLS handshake, CERT (11):
{ [data not shown]
* SSLv3, TLS handshake, Server key exchange (12):
{ [data not shown]
* SSLv3, TLS handshake, Server finished (14):
{ [data not shown]
* SSLv3, TLS handshake, Client key exchange (16):
} [data not shown]
* SSLv3, TLS change cipher, Client hello (1):
} [data not shown]
* SSLv3, TLS handshake, Finished (20):
} [data not shown]
* SSLv3, TLS change cipher, Client hello (1):
{ [data not shown]
* SSLv3, TLS handshake, Finished (20):
{ [data not shown]
* SSL connection using ECDHE-RSA-AES128-GCM-SHA256
* Server certificate:
* 	 subject: OU=Domain Control Validated; CN=*.btc-e.com
* 	 start date: 2014-03-15 15:12:42 GMT
* 	 expire date: 2016-03-15 15:12:42 GMT
* 	 subjectAltName: btc-e.com matched
* 	 issuer: C=US; ST=Arizona; L=Scottsdale; O=GoDaddy.com, Inc.; OU=http://certs.godaddy.com/repository/; CN=Go Daddy Secure Certificate Authority - G2
* 	 SSL certificate verify ok.
> GET /api/2/btc_eur/ticker HTTP/1.1.
> User-Agent: curl/7.32.0.
> Host: btc-e.com.
> Accept: */*.
> .
< HTTP/1.1 200 OK.
* Server cloudflare-nginx is not blacklisted
< Server: cloudflare-nginx.
< Date: Tue, 18 Mar 2014 12:04:53 GMT.
< Content-Type: text/html; charset=utf-8.
< Transfer-Encoding: chunked.
< Connection: keep-alive.
< Set-Cookie: __cfduid=d269982b5e43268e8c6337d78a075dc081395144293868; expires=Mon, 23-Dec-2019 23:50:00 GMT; path=/; domain=.btc-e.com; HttpOnly.
< X-Frame-Options: DENY.
< Expires: Thu, 01 Jan 1970 00:00:01 GMT.
< Cache-Control: no-cache.
< CF-RAY: 10d14b9ca74e0ae4-WAW.
< .
{ [data not shown]
.100   180    0   180    0     0    395      0 --:--:-- --:--:-- --:--:--   396
* Connection #0 to host btc-e.com left intact
{"ticker":{"high":450.51999,"low":436.54001,"avg":443.53,"vol":54642.46029,"vol_cur":123.32814,"last":437,"buy":439.49985,"sell":437,"updated":1395144293,"server_time":1395144293}}
--8<---------------cut here---------------end--------------->8---

Regards,
-- 
           Peter

Message #11 received at 17029 <at> debbugs.gnu.org (full text, mbox):

From: Peter Münster <pmlists <at> free.fr>
To: 17029 <at> debbugs.gnu.org
Subject: Re: output of "curl -v"
Date: Tue, 18 Mar 2014 23:11:31 +0100

Hi,

Since about one hour, it works again!

In fact I have a timer, that invokes about once per 20 minutes the
url-retrieve-synchronously function. And suddenly, it works again. I
don't know why. The output of curl and gnutls-cli does not change
significantly (only session-id).

Perhaps it just depends on the day-time?  ;)

-- 
           Peter

Message #14 received at 17029 <at> debbugs.gnu.org (full text, mbox):

From: Peter Münster <pmlists <at> free.fr>
To: 17029 <at> debbugs.gnu.org
Subject: Re: output of "curl -v"
Date: Tue, 18 Mar 2014 23:14:24 +0100

On Tue, Mar 18 2014, Peter Münster wrote:

> Since about one hour, it works again!

The error is back. :(

Very strange...

-- 
           Peter

Message #17 received at 17029 <at> debbugs.gnu.org (full text, mbox):

From: Ted Zlatanov <tzz <at> lifelogs.com>
To: Peter Münster <pmlists <at> free.fr>
Cc: 17029 <at> debbugs.gnu.org
Subject: Re: bug#17029: output of "curl -v"
Date: Thu, 20 Mar 2014 09:31:46 -0400

On Tue, 18 Mar 2014 23:14:24 +0100 Peter Münster <pmlists <at> free.fr> wrote: 

PM> On Tue, Mar 18 2014, Peter Münster wrote:
>> Since about one hour, it works again!

PM> The error is back. :(

PM> Very strange...

I can't replicate this error on Ubuntu 13.10 using the latest build.  I
must suspect something is wonky either in your setup or between you and
the server, or with the server itself (maybe the round-robin is picking
a badly configured server).  If it only happens to this one host and
only for you, I would ask that we close this bug, so we need a confirmation.

Thanks
Ted

Message #20 received at 17029 <at> debbugs.gnu.org (full text, mbox):

From: Peter Münster <pmlists <at> free.fr>
To: 17029 <at> debbugs.gnu.org
Subject: Re: bug#17029: output of "curl -v"
Date: Thu, 20 Mar 2014 14:48:37 +0100

On Thu, Mar 20 2014, Ted Zlatanov wrote:

> I can't replicate this error on Ubuntu 13.10 using the latest build.  I
> must suspect something is wonky either in your setup or between you and
> the server, or with the server itself (maybe the round-robin is picking
> a badly configured server).  If it only happens to this one host and
> only for you, I would ask that we close this bug, so we need a confirmation.

It seems, that it happens only to this one host.

And it seems also, that it is not emacs-related: I've downgraded gnutls
to version 3.0.28 and now it works fine. Perhaps a bug in gnutls-3.2.4?

-- 
           Peter

Message #25 received at 17029-done <at> debbugs.gnu.org (full text, mbox):

From: Ted Zlatanov <tzz <at> lifelogs.com>
To: Peter Münster <pmlists <at> free.fr>
Cc: 17029-done <at> debbugs.gnu.org
Subject: Re: bug#17029: output of "curl -v"
Date: Thu, 20 Mar 2014 10:42:31 -0400

On Thu, 20 Mar 2014 14:48:37 +0100 Peter Münster <pmlists <at> free.fr> wrote: 

PM> On Thu, Mar 20 2014, Ted Zlatanov wrote:
>> I can't replicate this error on Ubuntu 13.10 using the latest build.  I
>> must suspect something is wonky either in your setup or between you and
>> the server, or with the server itself (maybe the round-robin is picking
>> a badly configured server).  If it only happens to this one host and
>> only for you, I would ask that we close this bug, so we need a confirmation.

PM> It seems, that it happens only to this one host.

PM> And it seems also, that it is not emacs-related: I've downgraded gnutls
PM> to version 3.0.28 and now it works fine. Perhaps a bug in gnutls-3.2.4?

Yes, very strange.  I suggest asking the server administrators.  Sorry I
don't have a good answer for you, and thank you for the thorough bug
report.

Marking as done.

Ted

Message #28 received at 17029 <at> debbugs.gnu.org (full text, mbox):

From: Peter Münster <pmrb <at> free.fr>
To: Ted Zlatanov <tzz <at> lifelogs.com>
Cc: 17029 <at> debbugs.gnu.org
Subject: Re: bug#17029: output of "curl -v"
Date: Wed, 26 Mar 2014 19:22:42 +0100

On Tue, Mar 25 2014, Peter Münster wrote:

> When I find something, I'll report it on debbugs.

I believe, that I won't have enough time the next months to investigate
further. I hope that openSUSE developers can reproduce it and then fix
it: https://bugzilla.novell.com/show_bug.cgi?id=870456

-- 
           Peter

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.