From unknown Fri Aug 15 18:53:50 2025 X-Loop: help-debbugs@gnu.org Subject: bug#71113: git-fetch throws an error: gnutls_handshake() failed: An unexpected TLS packet was received. Resent-From: nigko Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 22 May 2024 10:21:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 71113 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 71113@debbugs.gnu.org X-Debbugs-Original-To: bug-guix@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.17163732323708 (code B ref -1); Wed, 22 May 2024 10:21:02 +0000 Received: (at submit) by debbugs.gnu.org; 22 May 2024 10:20:32 +0000 Received: from localhost ([127.0.0.1]:55027 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1s9j5E-0000xk-1M for submit@debbugs.gnu.org; Wed, 22 May 2024 06:20:32 -0400 Received: from lists.gnu.org ([209.51.188.17]:39904) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1s9j5B-0000xc-Lf for submit@debbugs.gnu.org; Wed, 22 May 2024 06:20:30 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1s9j55-0002gX-Lw for bug-guix@gnu.org; Wed, 22 May 2024 06:20:23 -0400 Received: from mail-ed1-x542.google.com ([2a00:1450:4864:20::542]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1s9j53-000693-Vt for bug-guix@gnu.org; Wed, 22 May 2024 06:20:23 -0400 Received: by mail-ed1-x542.google.com with SMTP id 4fb4d7f45d1cf-57342829409so1384375a12.1 for ; Wed, 22 May 2024 03:20:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1716373219; x=1716978019; darn=gnu.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=nF32LMxB2iji1PcG6WtnPlmHticFNkWR3Do25KQrxE0=; b=cWUyRRmzfy+dlF6vffhH6yJ9yLh0TlyetTmrIJx6adJwjaaFym2dGQMqvsNvgp8ywo vyjf+fZtlLr4QETzFn9LJFKkjmVceDI7YX8dH2p/6tvALTzLGjD1ZuGecxbPyFdFmwhF WYKwApKUZiyHlwNUnTWKT9s7WgL8jv0ZsfhUKkacrej6+7greiCVaf14qxy0/LiwfAc9 yyy8/tczFBUIE+6e1bUM3N0k6bluceCdIkFZweKA4xNVvqO4le+HJ0e6cmSWjK7fJx23 NGBoaHcKqVTk1GbbqjYgj54WAxyMwQuo9UyvKToF+yiwRhXje/nxV0/rZ44rzUHxycGF U5kg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1716373219; x=1716978019; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=nF32LMxB2iji1PcG6WtnPlmHticFNkWR3Do25KQrxE0=; b=kFfrGU0wGvw3e4TFYwpB8k9sOXLzmULolQ2lBxL9gerw1MZA7Zpqdl6EDrHxgHMrYl u5rIr9JZiGmkbwujbeEvumyz9TYuG+LHvNmXxPfOxXOpDinpYGkQb7FUJWP+fwJ5XqZn JyqTPhQh9gDFMmo/Qei+iHeEHYtVyvtqHJ0LQhCf8VjMRvadtZA4VVtlAalmvpckeSe6 QWQbJwBizqn5yevcUakyfG45VOHKwNb6p2QDw0jUKKJ139zJ8hUk1OpZldagE6oT+6mU 6xOlKDZxTBLt7ww/IqIRqCInLBvv0c/BNwM3nR74i0MaNTUJRXhqHdMdmJzMxwO6stzG 7w9A== X-Gm-Message-State: AOJu0YyRFaGwFe3lgzytXPc7X0dLF73yjHchPtgO74QoK1mbw4Q+Uqmo mQE4tCQ33aW6IEtVKudoJTp2/GeWf8SETWF2EBNcOoIzwL601lDspWD9PPUKE4Z/CSjAiQfs1si X2zuKb+ErkrhHK2TIlYZlkfa7g+Daam8JNnf03/bQ X-Google-Smtp-Source: AGHT+IHaSPmnweeE0RhlECnQpPK0oFQszbxdO45xoAhyvhkZhSgdt6//rmg7RqCMLHTHf43bKCUEpqlQNPCUEAxYM3Q= X-Received: by 2002:a50:d542:0:b0:574:d009:cb3c with SMTP id 4fb4d7f45d1cf-5752b4e1bccmr10637602a12.18.1716373219190; Wed, 22 May 2024 03:20:19 -0700 (PDT) MIME-Version: 1.0 From: nigko Date: Wed, 22 May 2024 15:20:07 +0500 Message-ID: Content-Type: text/plain; charset="UTF-8" Received-SPF: pass client-ip=2a00:1450:4864:20::542; envelope-from=nigko.yerden@gmail.com; helo=mail-ed1-x542.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) Hello Guix! When I try to download source code of any package that use git-fetch download method I get an error if I am behind https proxy server. For example, $ guix build --no-substitutes -S eigen The following derivations will be built: /gnu/store/rsk8d4py0c5qgp7q4xzd9ci3w4l5wki5-eigen-3.4.0-checkout.drv /gnu/store/ac69jx4b08rqd07v5m5ayd5dgh3b9798-eigen-3.4.0-checkout.drv building /gnu/store/ac69jx4b08rqd07v5m5ayd5dgh3b9798-eigen-3.4.0-checkout.drv... hint: Consider installing the `glibc-locales' package and defining `GUIX_LOCPATH', along these lines: guix install glibc-locales export GUIX_LOCPATH="$HOME/.guix-profile/lib/locale" See the "Application Setup" section in the manual, for more info. Initialized empty Git repository in /gnu/store/1syd2rljr26hx9y45645lxwfh1wsya50-eigen-3.4.0-checkout/.git/ fatal: unable to access 'https://gitlab.com/libeigen/eigen.git/': gnutls_handshake() failed: An unexpected TLS packet was received. Failed to do a shallow fetch; retrying a full fetch... fatal: unable to access 'https://gitlab.com/libeigen/eigen.git/': gnutls_handshake() failed: An unexpected TLS packet was received. git-fetch: '/gnu/store/lcygm0p2d59acvwi12lwldg5c0d4czpr-git-minimal-2.41.0/bin/git fetch origin' failed with exit code 128 Trying content-addressed mirror at bordeaux.guix.gnu.org... ... But when I use 'git clone' like this: $ guix shell --preserve=https_proxy -CN git nss-certs -- \ git clone https://gitlab.com/libeigen/eigen.git/ it works. I looked into definitions of 'git' and 'git-minimal' packages. They both do not depend on 'gnutls' package (at least directly), but instead on 'openssl'. Then why is git-fetch method apparently using 'gnutls' and not 'openssl'? Is there any workaround for git-fetch (similar to package transformations) that allow to replace 'gnutls' by 'openssl' in its dependency graph? Regards, Nigko From unknown Fri Aug 15 18:53:50 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: nigko Subject: bug#71113: closed (Re: bug#71113: git-fetch throws an error: gnutls_handshake() failed: An unexpected TLS packet was received.) Message-ID: References: X-Gnu-PR-Message: they-closed 71113 X-Gnu-PR-Package: guix Reply-To: 71113@debbugs.gnu.org Date: Fri, 24 May 2024 09:45:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1716543902-23664-1" This is a multi-part message in MIME format... ------------=_1716543902-23664-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #71113: git-fetch throws an error: gnutls_handshake() failed: An unexpected= TLS packet was received. which was filed against the guix package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 71113@debbugs.gnu.org. --=20 71113: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D71113 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1716543902-23664-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 71113-done) by debbugs.gnu.org; 24 May 2024 09:44:39 +0000 Received: from localhost ([127.0.0.1]:36157 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sARTa-00069D-Ro for submit@debbugs.gnu.org; Fri, 24 May 2024 05:44:39 -0400 Received: from mail-ej1-f68.google.com ([209.85.218.68]:53750) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sARTX-000697-Q3 for 71113-done@debbugs.gnu.org; Fri, 24 May 2024 05:44:37 -0400 Received: by mail-ej1-f68.google.com with SMTP id a640c23a62f3a-a6268034cf8so34319066b.3 for <71113-done@debbugs.gnu.org>; Fri, 24 May 2024 02:44:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1716543803; x=1717148603; darn=debbugs.gnu.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=pA6onCQpCElZ7Y9IZkyGT2OzK5wSZjaVZiYE7zH8Rv0=; b=Kh18gqbrqzGJ7PuGBwVCCzOvF+PxqPP21FU3OUowL53qkhsGZrXpf92VJfTyTTLPsB s7q4DjSQA36d3B8R2HZpaWb914UzOSihnQHpwZy4oK8ynd8wf5f7G1RnWGmGd8b52xX7 dFyd31/PDJ0HIQ02MvuSdfu4DEJNZ/EWUwto4hKUhg8FrFGB3EsUEDhpSRVMVYde16RW wHmvHH2c3HV+12xToyP/QCKCccey71S3YbVolnJwOnLIwWgUFQqvaiBPe4Z/BQxzvY4q OvGLWc/7gTrmzzHU9xYY9sEgR4IB3xzyWITkClKQ/LEsRouSfQt2ertIref5o4wo9q8Q EgXQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1716543803; x=1717148603; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=pA6onCQpCElZ7Y9IZkyGT2OzK5wSZjaVZiYE7zH8Rv0=; b=EI+1u/qAQO6Dj8H3dLWGnyNwnWOFx3xIRd4DkuJm0HKAFb4mXSRsyLyVT6T1+AHKLD jOH3mNpdNcs3G2Wfreo5f7nTttDuVVUtwUN7Yicla2IG0xd2+BbC6Y7dHEpQURmzcEi8 JwPBC51xUeby1rcBpHFGqTzgL/2gpqep9Wgh2RMwBlLp9MYsKkBrAS+lDp5T8G49Iege /Lp8qlVRO6c+a2CoFY4N/q+b/6HQa3bChYU21eRNQ1u+MPAAKFMhKtrmLHoLb4UHNZwu pNodXh6pdULvm9yM/cDr0rzw22KiF/vi6LLOXibxfPbtletPjrvFZyTRPGX/zoTw8tJs zkSQ== X-Gm-Message-State: AOJu0YzKxGBGbnXapddyjuWDNwtHjWOSaKheKntGrjJW7ISzuehAOBy6 lGmamQekOj+rYBzcTPWEcMQdznuhkM4fX60Ca8ozftKvHZGV59i4sW2d+pQo8A6vzHyYLtmp6Ip OGsOW0+dkiZ8rNWiRsBOm6k5TXowVC6v3TWo= X-Google-Smtp-Source: AGHT+IH8zCeV9vwMBRH8oxUb/33yx1xy/2mXKi4/Pp6oJsKA0pqGIsh8TYqMvrSV/rcDlLTsiIqA3od5Ly4EfoPyRok= X-Received: by 2002:a50:aad2:0:b0:578:4cb1:bcdb with SMTP id 4fb4d7f45d1cf-578519b29a3mr1753824a12.33.1716543802651; Fri, 24 May 2024 02:43:22 -0700 (PDT) MIME-Version: 1.0 From: nigko Date: Fri, 24 May 2024 14:43:11 +0500 Message-ID: Subject: Re: bug#71113: git-fetch throws an error: gnutls_handshake() failed: An unexpected TLS packet was received. To: 71113-done@debbugs.gnu.org Content-Type: text/plain; charset="UTF-8" X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 71113-done X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) It turns out that this wasn't Guix's bug at all, but only the wrong configuration of https_proxy variable in the guix-daemon environment (on foreign distro): I mistakenly set https_proxy to "https://... "address, while the proxy server understands only http protocol. Setting https_proxy to "http://.." address fixes this. Close this bug report. Regards, Nigko Yerden ------------=_1716543902-23664-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 22 May 2024 10:20:32 +0000 Received: from localhost ([127.0.0.1]:55027 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1s9j5E-0000xk-1M for submit@debbugs.gnu.org; Wed, 22 May 2024 06:20:32 -0400 Received: from lists.gnu.org ([209.51.188.17]:39904) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1s9j5B-0000xc-Lf for submit@debbugs.gnu.org; Wed, 22 May 2024 06:20:30 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1s9j55-0002gX-Lw for bug-guix@gnu.org; Wed, 22 May 2024 06:20:23 -0400 Received: from mail-ed1-x542.google.com ([2a00:1450:4864:20::542]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1s9j53-000693-Vt for bug-guix@gnu.org; Wed, 22 May 2024 06:20:23 -0400 Received: by mail-ed1-x542.google.com with SMTP id 4fb4d7f45d1cf-57342829409so1384375a12.1 for ; Wed, 22 May 2024 03:20:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1716373219; x=1716978019; darn=gnu.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=nF32LMxB2iji1PcG6WtnPlmHticFNkWR3Do25KQrxE0=; b=cWUyRRmzfy+dlF6vffhH6yJ9yLh0TlyetTmrIJx6adJwjaaFym2dGQMqvsNvgp8ywo vyjf+fZtlLr4QETzFn9LJFKkjmVceDI7YX8dH2p/6tvALTzLGjD1ZuGecxbPyFdFmwhF WYKwApKUZiyHlwNUnTWKT9s7WgL8jv0ZsfhUKkacrej6+7greiCVaf14qxy0/LiwfAc9 yyy8/tczFBUIE+6e1bUM3N0k6bluceCdIkFZweKA4xNVvqO4le+HJ0e6cmSWjK7fJx23 NGBoaHcKqVTk1GbbqjYgj54WAxyMwQuo9UyvKToF+yiwRhXje/nxV0/rZ44rzUHxycGF U5kg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1716373219; x=1716978019; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=nF32LMxB2iji1PcG6WtnPlmHticFNkWR3Do25KQrxE0=; b=kFfrGU0wGvw3e4TFYwpB8k9sOXLzmULolQ2lBxL9gerw1MZA7Zpqdl6EDrHxgHMrYl u5rIr9JZiGmkbwujbeEvumyz9TYuG+LHvNmXxPfOxXOpDinpYGkQb7FUJWP+fwJ5XqZn JyqTPhQh9gDFMmo/Qei+iHeEHYtVyvtqHJ0LQhCf8VjMRvadtZA4VVtlAalmvpckeSe6 QWQbJwBizqn5yevcUakyfG45VOHKwNb6p2QDw0jUKKJ139zJ8hUk1OpZldagE6oT+6mU 6xOlKDZxTBLt7ww/IqIRqCInLBvv0c/BNwM3nR74i0MaNTUJRXhqHdMdmJzMxwO6stzG 7w9A== X-Gm-Message-State: AOJu0YyRFaGwFe3lgzytXPc7X0dLF73yjHchPtgO74QoK1mbw4Q+Uqmo mQE4tCQ33aW6IEtVKudoJTp2/GeWf8SETWF2EBNcOoIzwL601lDspWD9PPUKE4Z/CSjAiQfs1si X2zuKb+ErkrhHK2TIlYZlkfa7g+Daam8JNnf03/bQ X-Google-Smtp-Source: AGHT+IHaSPmnweeE0RhlECnQpPK0oFQszbxdO45xoAhyvhkZhSgdt6//rmg7RqCMLHTHf43bKCUEpqlQNPCUEAxYM3Q= X-Received: by 2002:a50:d542:0:b0:574:d009:cb3c with SMTP id 4fb4d7f45d1cf-5752b4e1bccmr10637602a12.18.1716373219190; Wed, 22 May 2024 03:20:19 -0700 (PDT) MIME-Version: 1.0 From: nigko Date: Wed, 22 May 2024 15:20:07 +0500 Message-ID: Subject: git-fetch throws an error: gnutls_handshake() failed: An unexpected TLS packet was received. To: bug-guix@gnu.org Content-Type: text/plain; charset="UTF-8" Received-SPF: pass client-ip=2a00:1450:4864:20::542; envelope-from=nigko.yerden@gmail.com; helo=mail-ed1-x542.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) Hello Guix! When I try to download source code of any package that use git-fetch download method I get an error if I am behind https proxy server. For example, $ guix build --no-substitutes -S eigen The following derivations will be built: /gnu/store/rsk8d4py0c5qgp7q4xzd9ci3w4l5wki5-eigen-3.4.0-checkout.drv /gnu/store/ac69jx4b08rqd07v5m5ayd5dgh3b9798-eigen-3.4.0-checkout.drv building /gnu/store/ac69jx4b08rqd07v5m5ayd5dgh3b9798-eigen-3.4.0-checkout.drv... hint: Consider installing the `glibc-locales' package and defining `GUIX_LOCPATH', along these lines: guix install glibc-locales export GUIX_LOCPATH="$HOME/.guix-profile/lib/locale" See the "Application Setup" section in the manual, for more info. Initialized empty Git repository in /gnu/store/1syd2rljr26hx9y45645lxwfh1wsya50-eigen-3.4.0-checkout/.git/ fatal: unable to access 'https://gitlab.com/libeigen/eigen.git/': gnutls_handshake() failed: An unexpected TLS packet was received. Failed to do a shallow fetch; retrying a full fetch... fatal: unable to access 'https://gitlab.com/libeigen/eigen.git/': gnutls_handshake() failed: An unexpected TLS packet was received. git-fetch: '/gnu/store/lcygm0p2d59acvwi12lwldg5c0d4czpr-git-minimal-2.41.0/bin/git fetch origin' failed with exit code 128 Trying content-addressed mirror at bordeaux.guix.gnu.org... ... But when I use 'git clone' like this: $ guix shell --preserve=https_proxy -CN git nss-certs -- \ git clone https://gitlab.com/libeigen/eigen.git/ it works. I looked into definitions of 'git' and 'git-minimal' packages. They both do not depend on 'gnutls' package (at least directly), but instead on 'openssl'. Then why is git-fetch method apparently using 'gnutls' and not 'openssl'? Is there any workaround for git-fetch (similar to package transformations) that allow to replace 'gnutls' by 'openssl' in its dependency graph? Regards, Nigko ------------=_1716543902-23664-1--