Home | Devuan | Git | Forum | Packages | Popcon
Donate now!
Download

Devuan bug report logs - #164
gnutls: gnutls_handshake() failed: Public key signature verification has failed.

Package: libcurl3-gnutls; Reported by: david <[email protected]>; Keywords: ascii; Done: KatolaZ <[email protected]>; Maintainer for libcurl3-gnutls is (unknown).

Message received at [email protected]:


Received: (at 164-done) by bugs.devuan.org; 12 Mar 2018 10:50:05 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from tupac3.dyne.org [195.169.149.119]
	by fulcanelli with IMAP (fetchmail-6.3.26)
	for <debbugs@localhost> (single-drop); Mon, 12 Mar 2018 11:50:05 +0100 (CET)
Received: from [127.0.0.1] (localhost [127.0.0.1])
	(Authenticated sender: [email protected])
	with ESMTPSA id 5ED57F60905
Date: Mon, 12 Mar 2018 10:46:09 +0000
From: KatolaZ <[email protected]>
To: [email protected]
Subject: closing
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="kyDGfcSsqT5jcshG"
Content-Disposition: inline
User-Agent: Mutt/1.5.23 (2014-03-12)
X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED
	autolearn=disabled version=3.4.1
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on tupac3.dyne.org


--kyDGfcSsqT5jcshG
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

OK, I am closing it then.

--kyDGfcSsqT5jcshG
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlqmWnEACgkQXyCzrgtfBi/uVgCfRgjRuq34YpKnAtrqhwTkUI/Y
cj8Ani51a2SxwO5gw53+l8HSsnKha06E
=hpkZ
-----END PGP SIGNATURE-----

--kyDGfcSsqT5jcshG--
Notification sent to david <[email protected]>:
bug acknowledged by developer. Full text available.
Reply sent to KatolaZ <[email protected]>:
You have taken responsibility. Full text available.

Message received at [email protected]:


Received: (at 164) by bugs.devuan.org; 12 Mar 2018 01:30:05 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from tupac3.dyne.org [195.169.149.119]
	by fulcanelli with IMAP (fetchmail-6.3.26)
	for <debbugs@localhost> (single-drop); Mon, 12 Mar 2018 02:30:05 +0100 (CET)
Received: from laas.laas.fr (laas.laas.fr [140.93.0.15])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by vm6.ganeti.dyne.org (Postfix) with ESMTPS id D3569F60921
	for <[email protected]>; Mon, 12 Mar 2018 02:24:09 +0100 (CET)
Received: from sorcerer.laas.fr (pumpkin.laas.fr [IPv6:2001:660:6602:4:529a:4cff:fe19:8d6a])
	by laas.laas.fr (8.15.2/8.15.2) with SMTP id w2C1NFMw005801
	for <[email protected]>; Mon, 12 Mar 2018 02:23:15 +0100 (CET)
Received: by sorcerer.laas.fr (sSMTP sendmail emulation); Mon, 12 Mar 2018 02:23:15 +0100
Date: Mon, 12 Mar 2018 02:23:15 +0100
From: David Gauchard <[email protected]>
To: [email protected]
Subject: gnutls: gnutls_handshake() failed: Public key signature verification
 has failed.
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.24 (2015-08-30)
X-Spam-Status: No, score=-2.3 required=5.0 tests=RCVD_IN_DNSWL_MED,
	RP_MATCHES_RCVD,SPF_PASS autolearn=disabled version=3.4.1
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on tupac3.dyne.org


Solved:

An older (already installed before transition do devuan) version of librtmp1
(2015-03-15) was incorrectly considered as newer.

Forcing the installation of the latest version (2015-12-23) made the other
one disappear and things working.

# apt-cache policy librtmp1
librtmp1:
  Installed: 2:2.4~20150315.gita107cef9b-dmo1+deb8u2
  Candidate: 2:2.4~20150315.gita107cef9b-dmo1+deb8u2
  Version table:
 *** 2:2.4~20150315.gita107cef9b-dmo1+deb8u2 100
        100 /var/lib/dpkg/status
     2.4+20151223.gitfa8646d.1-1+b1 100
        100 http://auto.mirror.devuan.org/merged ascii/main amd64 Packages

I hope this version comparison bug has no further impact on transition for
other users.
Acknowledgement sent to David Gauchard <[email protected]>:
Extra info received and forwarded to list. Copy sent to [email protected]. Full text available.
Information forwarded to [email protected], [email protected]:
bug#164; Package libcurl3-gnutls. Full text available.
Tags added: ascii Request was from KatolaZ <[email protected]> to [email protected]. Full text available.

Message received at [email protected]:


Received: (at 164) by bugs.devuan.org; 28 Nov 2017 15:20:05 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from tupac3.dyne.org [195.169.149.119]
	by fulcanelli with IMAP (fetchmail-6.3.26)
	for <debbugs@localhost> (single-drop); Tue, 28 Nov 2017 16:20:05 +0100 (CET)
Received: from smtp5-g21.free.fr (smtp5-g21.free.fr [212.27.42.5])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by vm6.ganeti.dyne.org (Postfix) with ESMTPS id AE25FF604F8
	for <[email protected]>; Tue, 28 Nov 2017 16:16:40 +0100 (CET)
Received: from tunnel (unknown [78.213.218.122])
	by smtp5-g21.free.fr (Postfix) with ESMTP id 897DC5FFFE
	for <[email protected]>; Tue, 28 Nov 2017 16:16:37 +0100 (CET)
Received: by tunnel (Postfix, from userid 9043)
	id 4D13E1533035; Tue, 28 Nov 2017 16:16:37 +0100 (CET)
To: [email protected]
Subject: Re: Irreproducible
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
Message-Id: <20171128151637.4D13E1533035@tunnel>
Date: Tue, 28 Nov 2017 16:16:37 +0100 (CET)
From: [email protected] (david)
X-Spam-Status: No, score=-3.5 required=5.0 tests=RCVD_IN_DNSWL_LOW,
	RCVD_IN_MSPIKE_H2 autolearn=disabled version=3.4.1
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on tupac3.dyne.org


Thanks.

My setup has been a continuously upgraded debian system for more than 15
years when I recently upgraded to devuan/stable=jessie, and very recently to
devuan/ascii.  I'm using aptitude, and I it says it is up to date.

When I switched jessie to ascii from I had lots of conflicts that I did not
try to resolve at that time.  Then they recently solved by themselve with
apt and no tweaking. Then I realized that git+https problem.

The not truncated message is:
        $ git clone https://github.com/devuan/jenkins-debian-glue
        Cloning into 'jenkins-debian-glue'...
        fatal: unable to access 'https://github.com/devuan/jenkins-debian-glue/': gnutls_handshake() failed: Public key signature verification has failed.

It happens with every accounts, so it is not a git misconfiguration.

I realize that git is otherwise working with protocol ssh://git@
I have no problem with:
        git clone [email protected]:devuan/jenkins-debian-glue.git

I just moved /etc/ssl/certs to /etc/ssl/certs.old and reinstalled
ca-certificates, but the problem remains.

I tried with lynx (accepting all cookies) with no problem:
        lynx https://github.com/devuan/jenkins-debian-glue/

It is not clear to me where to search for the origin of my problem,
considering that you say it is flawlessly working on other ascii
installations.

My /etc/apt/sources.list is:
-------------------------------------------------------------
deb     http://auto.mirror.devuan.org/merged ascii main
deb-src http://auto.mirror.devuan.org/merged ascii main
deb     http://auto.mirror.devuan.org/merged ascii-updates main
deb-src http://auto.mirror.devuan.org/merged ascii-updates main
deb     http://auto.mirror.devuan.org/merged ascii-security main
deb-src http://auto.mirror.devuan.org/merged ascii-security main

deb     http://packages.devuan.org/merged ascii-security main
deb-src http://packages.devuan.org/merged ascii-security main

#deb     http://auto.mirror.devuan.org/merged ascii-proposed main
#deb-src http://auto.mirror.devuan.org/merged ascii-proposed main

deb     http://auto.mirror.devuan.org/merged ascii-backports main
deb-src http://auto.mirror.devuan.org/merged ascii-backports main

#deb     http://auto.mirror.devuan.org/devuan experimental main
#deb-src http://auto.mirror.devuan.org/devuan experimental main
-------------------------------------------------------------
I also have in sources.list.d/:

-------------------------------------------------------------
deb http://download.opensuse.org/repositories/isv:/ownCloud:/community/Debian_7.0/ /
deb [arch=amd64] http://dl.google.com/linux/chrome/deb/ stable main
-------------------------------------------------------------


and also: Thanks again for devuan :)
Acknowledgement sent to [email protected] (david):
Extra info received and forwarded to list. Copy sent to [email protected]. Full text available.
Information forwarded to [email protected], [email protected]:
bug#164; Package libcurl3-gnutls. Full text available.

Message received at [email protected]:


Received: (at 164) by bugs.devuan.org; 28 Nov 2017 15:10:03 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from tupac3.dyne.org [195.169.149.119]
	by fulcanelli with IMAP (fetchmail-6.3.26)
	for <debbugs@localhost> (single-drop); Tue, 28 Nov 2017 16:10:03 +0100 (CET)
Received: from laas.laas.fr (laas.laas.fr [140.93.0.15])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by vm6.ganeti.dyne.org (Postfix) with ESMTPS id 0C9F2F6049D
	for <[email protected]>; Tue, 28 Nov 2017 16:05:25 +0100 (CET)
Received: from sorcerer.laas.fr (pumpkin.laas.fr [IPv6:2001:660:6602:4:529a:4cff:fe19:8d6a])
	by laas.laas.fr (8.15.2/8.15.2) with SMTP id vASF5Mak008846
	for <[email protected]>; Tue, 28 Nov 2017 16:05:22 +0100 (CET)
Received: by sorcerer.laas.fr (sSMTP sendmail emulation); Tue, 28 Nov 2017 16:05:22 +0100
Date: Tue, 28 Nov 2017 16:05:22 +0100
From: David Gauchard <[email protected]>
To: [email protected]
Subject: Re: Irreproducible
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.24 (2015-08-30)
X-Spam-Status: No, score=-2.3 required=5.0 tests=FAKE_REPLY_C,
	RCVD_IN_DNSWL_MED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,RP_MATCHES_RCVD,
	SPF_PASS autolearn=disabled version=3.4.1
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on tupac3.dyne.org


Thanks.

My setup has been a continuously upgraded debian system for more than 15
years when I recently upgraded to devuan/stable=jessie, and very recently to
devuan/ascii.  I'm using aptitude, and I it says it is up to date.

When I switched jessie to ascii from I had lots of conflicts that I did not
try to resolve at that time.  Then they recently solved by themselve with
apt and no tweaking. Then I realized that git+https problem.

The not truncated message is:
	$ git clone https://github.com/devuan/jenkins-debian-glue
	Cloning into 'jenkins-debian-glue'...
	fatal: unable to access 'https://github.com/devuan/jenkins-debian-glue/': gnutls_handshake() failed: Public key signature verification has failed.

It happens with every accounts, so it is not a git misconfiguration. 

I realize that git is otherwise working with protocol ssh://git@
I have no problem with:
	git clone [email protected]:devuan/jenkins-debian-glue.git

I just moved /etc/ssl/certs to /etc/ssl/certs.old and reinstalled
ca-certificates, but the problem remains.

I tried with lynx (accepting all cookies) with no problem:
	lynx https://github.com/devuan/jenkins-debian-glue/

It is not clear to me where to search for the origin of my problem,
considering that you say it is flawlessly working on other ascii
installations.

My /etc/apt/sources.list is:
-------------------------------------------------------------
deb     http://auto.mirror.devuan.org/merged ascii main
deb-src http://auto.mirror.devuan.org/merged ascii main
deb     http://auto.mirror.devuan.org/merged ascii-updates main
deb-src http://auto.mirror.devuan.org/merged ascii-updates main
deb     http://auto.mirror.devuan.org/merged ascii-security main
deb-src http://auto.mirror.devuan.org/merged ascii-security main

deb     http://packages.devuan.org/merged ascii-security main
deb-src http://packages.devuan.org/merged ascii-security main

#deb     http://auto.mirror.devuan.org/merged ascii-proposed main
#deb-src http://auto.mirror.devuan.org/merged ascii-proposed main

deb     http://auto.mirror.devuan.org/merged ascii-backports main
deb-src http://auto.mirror.devuan.org/merged ascii-backports main

#deb     http://auto.mirror.devuan.org/devuan experimental main
#deb-src http://auto.mirror.devuan.org/devuan experimental main
-------------------------------------------------------------
I also have in sources.list.d/:

-------------------------------------------------------------
deb http://download.opensuse.org/repositories/isv:/ownCloud:/community/Debian_7.0/ /
deb [arch=amd64] http://dl.google.com/linux/chrome/deb/ stable main
-------------------------------------------------------------


and also: Thanks again for devuan :)
Acknowledgement sent to David Gauchard <[email protected]>:
Extra info received and forwarded to list. Copy sent to [email protected]. Full text available.
Information forwarded to [email protected], [email protected]:
bug#164; Package libcurl3-gnutls. Full text available.

Message received at [email protected]:


Received: (at 164) by bugs.devuan.org; 28 Nov 2017 11:50:07 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from tupac3.dyne.org [195.169.149.119]
	by fulcanelli with IMAP (fetchmail-6.3.26)
	for <debbugs@localhost> (single-drop); Tue, 28 Nov 2017 12:50:07 +0100 (CET)
Received: from [127.0.0.1] (localhost [127.0.0.1])
	(Authenticated sender: [email protected])
	with ESMTPSA id 35DB6F60872
Date: Tue, 28 Nov 2017 11:44:16 +0000
From: KatolaZ <[email protected]>
To: [email protected]
Subject: Irreproducible
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="ISKrrfpKsPiF35CV"
Content-Disposition: inline
User-Agent: Mutt/1.5.23 (2014-03-12)
X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED
	autolearn=disabled version=3.4.1
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on tupac3.dyne.org


--ISKrrfpKsPiF35CV
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

there is no way I can reproduce this bug. I have tried the same clone
=66rom 4 different machines, running either Devuan Jessie or Devuan
Ascii, and the clone is always successful. The certificate is all
right and not due to expire atm.

Could you please provide more details on your setup?

Cheers

--ISKrrfpKsPiF35CV
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlodTBAACgkQXyCzrgtfBi8ptgCfdAFeNvt8/O6p8So6+CgjQxgE
PmUAnRz0TQ+Jvt8zm3kHAJdjMedCaW7N
=dBg2
-----END PGP SIGNATURE-----

--ISKrrfpKsPiF35CV--
Acknowledgement sent to KatolaZ <[email protected]>:
Extra info received and forwarded to list. Copy sent to [email protected]. Full text available.
Information forwarded to [email protected], [email protected]:
bug#164; Package libcurl3-gnutls. Full text available.

Message received at [email protected]:


Received: (at submit) by bugs.devuan.org; 28 Nov 2017 11:30:06 +0000
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from tupac3.dyne.org [195.169.149.119]
	by fulcanelli with IMAP (fetchmail-6.3.26)
	for <debbugs@localhost> (single-drop); Tue, 28 Nov 2017 12:30:06 +0100 (CET)
Received: from smtp5-g21.free.fr (smtp5-g21.free.fr [212.27.42.5])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by vm6.ganeti.dyne.org (Postfix) with ESMTPS id 6A4B6F604F8
	for <[email protected]>; Tue, 28 Nov 2017 12:21:10 +0100 (CET)
Received: from tunnel (unknown [78.213.218.122])
	by smtp5-g21.free.fr (Postfix) with ESMTP id 6DBD55FF3F
	for <[email protected]>; Tue, 28 Nov 2017 12:21:08 +0100 (CET)
Received: by tunnel (Postfix, from userid 9043)
	id BA049152D2CD; Tue, 28 Nov 2017 12:21:07 +0100 (CET)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: david <[email protected]>
To: Devuan Bug Tracking System <[email protected]>
Subject: gnutls: gnutls_handshake() failed: Public key signature verification has failed.
Message-ID: <[email protected]>
X-Mailer: reportbug 7.1.6+devuan2.1
Date: Tue, 28 Nov 2017 12:21:07 +0100
X-Spam-Status: No, score=-3.5 required=5.0 tests=RCVD_IN_DNSWL_LOW,
	RCVD_IN_MSPIKE_H2 autolearn=disabled version=3.4.1
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on tupac3.dyne.org

Package: libcurl3-gnutls
Version: 7.52.1-5
Severity: important
File: gnutls

Dear Maintainer,

the command:
	git clone https://github.com/devuan/jenkins-debian-glue

leads to this error:
	fatal: unable to access 'https://github.com/devuan/jenkins-debian-glue/': gnutls_handshake() failed: Publ
   
-- System Information:
LSB Version:	core-2.0-amd64:core-2.0-noarch:core-3.0-amd64:core-3.0-noarch:core-3.1-amd64:core-3.1-noarch:core-3.2-amd64:core-3.2-noarch:core-4.0-amd64:core-4.0-noarch:core-4.1-amd64:core-4.1-noarch:cxx-3.0-amd64:cxx-3.0-noarch:cxx-3.1-amd64:cxx-3.1-noarch:cxx-3.2-amd64:cxx-3.2-noarch:cxx-4.0-amd64:cxx-4.0-noarch:cxx-4.1-amd64:cxx-4.1-noarch:desktop-3.1-amd64:desktop-3.1-noarch:desktop-3.2-amd64:desktop-3.2-noarch:desktop-4.0-amd64:desktop-4.0-noarch:desktop-4.1-amd64:desktop-4.1-noarch:graphics-2.0-amd64:graphics-2.0-noarch:graphics-3.0-amd64:graphics-3.0-noarch:graphics-3.1-amd64:graphics-3.1-noarch:graphics-3.2-amd64:graphics-3.2-noarch:graphics-4.0-amd64:graphics-4.0-noarch:graphics-4.1-amd64:graphics-4.1-noarch:languages-3.2-amd64:languages-3.2-noarch:languages-4.0-amd64:languages-4.0-noarch:languages-4.1-amd64:languages-4.1-noarch:multimedia-3.2-amd64:multimedia-3.2-noarch:multimedia-4.0-amd64:multimedia-4.0-noarch:multimedia-4.1-amd64:multimedia-4.1-noarch:printing-3.2-amd64:p
 rinting-3.2-noarch:printing-4.0-amd64:printing-4.0-noarch:printing-4.1-amd64:printing-4.1-noarch:qt4-3.1-amd64:qt4-3.1-noarch:security-4.0-amd64:security-4.0-noarch:security-4.1-amd64:security-4.1-noarch
Distributor ID:	Devuan
Description:	Devuan GNU/Linux 2.0 (ascii)
Release:	2.0
Codename:	ascii

Architecture: x86_64

Kernel: Linux 4.9.0-0.bpo.3-amd64 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=fr_FR.UTF-8 (charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages libcurl3-gnutls:amd64 depends on:
ii  libc6             2.24-11+deb9u1
ii  libcomerr2        1.43.4-2
ii  libgnutls30       3.5.8-5+deb9u3
ii  libgssapi-krb5-2  1.15-1+deb9u1
ii  libidn2-0         0.16-1+deb9u1
ii  libk5crypto3      1.15-1+deb9u1
ii  libkrb5-3         1.15-1+deb9u1
ii  libldap-2.4-2     2.4.45+dfsg-1~bpo9+1
ii  libnettle6        3.3-1+b2
ii  libnghttp2-14     1.18.1-1
ii  libpsl5           0.17.0-3
ii  librtmp1          2:2.4~20150315.gita107cef9b-dmo1+deb8u2
ii  libssh2-1         1.7.0-1
ii  zlib1g            1:1.2.8.dfsg-5

Versions of packages libcurl3-gnutls:amd64 recommends:
ii  ca-certificates  20161130+nmu1

libcurl3-gnutls:amd64 suggests no packages.

-- no debconf information
Acknowledgement sent to david <[email protected]>:
New bug report received and forwarded. Copy sent to [email protected].

Your message specified a Severity: in the pseudo-header, but the severity value important was not recognised. The default severity normal is being used instead. The recognised values are: critical, grave, normal, minor, wishlist.

Full text available.

Report forwarded to [email protected], [email protected]:
bug#164; Package libcurl3-gnutls. Full text available.

Devuan BTS -- Powered by Debian bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.

Devuan Bugs Owner <[email protected]>.
Last modified: Sun, 1 Dec 2024 00:39:02 UTC