GNU bug report logs - #71113
git-fetch throws an error: gnutls_handshake() failed: An unexpected TLS packet was received.

Previous Next

Full log

View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: nigko <nigko.yerden <at> gmail.com>
Cc: tracker <at> debbugs.gnu.org
Subject: bug#71113: closed (git-fetch throws an error: gnutls_handshake()
 failed: An unexpected TLS packet was received.)
Date: Fri, 24 May 2024 09:45:01 +0000

[Message part 1 (text/plain, inline)]

Your message dated Fri, 24 May 2024 14:43:11 +0500
with message-id <CAO356aH3Qmo=txuHXqjJLs2TP2yD9bVsRfuatps1z=6uOacdEg <at> mail.gmail.com>
and subject line Re: bug#71113: git-fetch throws an error: gnutls_handshake() failed: An unexpected TLS packet was received.
has caused the debbugs.gnu.org bug report #71113,
regarding git-fetch throws an error: gnutls_handshake() failed: An unexpected TLS packet was received.
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs <at> gnu.org.)


-- 
71113: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=71113
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems

[Message part 2 (message/rfc822, inline)]

From: nigko <nigko.yerden <at> gmail.com>
To: bug-guix <at> gnu.org
Subject: git-fetch throws an error: gnutls_handshake() failed: An unexpected
 TLS packet was received.
Date: Wed, 22 May 2024 15:20:07 +0500

Hello Guix!

When I try to download source code of any package that use
git-fetch download method I get an error if I am behind https proxy
server. For example,

$ guix build --no-substitutes -S eigen
The following derivations will be built:
/gnu/store/rsk8d4py0c5qgp7q4xzd9ci3w4l5wki5-eigen-3.4.0-checkout.drv
/gnu/store/ac69jx4b08rqd07v5m5ayd5dgh3b9798-eigen-3.4.0-checkout.drv
building /gnu/store/ac69jx4b08rqd07v5m5ayd5dgh3b9798-eigen-3.4.0-checkout.drv...
hint: Consider installing the `glibc-locales' package and defining
`GUIX_LOCPATH', along these lines:

guix install glibc-locales
export GUIX_LOCPATH="$HOME/.guix-profile/lib/locale"

See the "Application Setup" section in the manual, for more info.

Initialized empty Git repository in
/gnu/store/1syd2rljr26hx9y45645lxwfh1wsya50-eigen-3.4.0-checkout/.git/
fatal: unable to access 'https://gitlab.com/libeigen/eigen.git/':
gnutls_handshake() failed: An unexpected TLS packet was received.
Failed to do a shallow fetch; retrying a full fetch...
fatal: unable to access 'https://gitlab.com/libeigen/eigen.git/':
gnutls_handshake() failed: An unexpected TLS packet was received.
git-fetch:
'/gnu/store/lcygm0p2d59acvwi12lwldg5c0d4czpr-git-minimal-2.41.0/bin/git
fetch origin'
failed with exit code 128
Trying content-addressed mirror at bordeaux.guix.gnu.org...
...

But when I use 'git clone' like this:

$ guix shell --preserve=https_proxy -CN git nss-certs -- \
git clone https://gitlab.com/libeigen/eigen.git/

it works.

I looked into definitions of 'git' and 'git-minimal' packages.
They both do not depend on 'gnutls' package (at least directly),
but instead on 'openssl'. Then why is git-fetch method apparently
using 'gnutls' and not 'openssl'? Is there any workaround for
git-fetch (similar to package transformations) that allow to
replace 'gnutls' by 'openssl' in its dependency graph?

Regards,
Nigko

[Message part 3 (message/rfc822, inline)]

From: nigko <nigko.yerden <at> gmail.com>
To: 71113-done <at> debbugs.gnu.org
Subject: Re: bug#71113: git-fetch throws an error: gnutls_handshake() failed:
 An unexpected TLS packet was received.
Date: Fri, 24 May 2024 14:43:11 +0500

It turns out that this wasn't Guix's bug at all, but only the wrong
configuration of https_proxy
variable in the guix-daemon environment (on foreign distro): I
mistakenly set https_proxy
to "https://... "address, while the proxy server understands only http
protocol.  Setting
https_proxy to "http://.." address fixes this.

Close this bug report.

Regards,
Nigko Yerden

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.