Mon 14 Apr 2008 01:08:02 PM UTC, original submission:
I am trying to connect via SSL to a private IRC server. BitchX works fine. weechat 2.6 with libgnutls 1.6.3 works fine. weechat 2.6 (compiled from same source) with libgnutls 2.2.2 does not.
[12:08:34] -=- WeeChat: connecting to server irc.wibble.org:994 (SSL)...
[12:08:34] =!= WeeChat Error: gnutls handshake failed
[12:08:34] -=- WeeChat: Reconnecting to server in 30 seconds
$ ldd `which weechat-curses`
libdl.so.2 => /lib/libdl.so.2 (0x40025000)
libncursesw.so.5 => /lib/libncursesw.so.5 (0x40030000)
libgnutls.so.26 => /usr/lib/libgnutls.so.26 (0x4006b000)
libc.so.6 => /lib/libc.so.6 (0x400e8000)
/lib/ld-linux.so.2 (0x40000000)
libtasn1.so.3 => /usr/lib/libtasn1.so.3 (0x4020f000)
libgpg-error.so.0 => /usr/lib/libgpg-error.so.0 (0x40224000)
libz.so.1 => /usr/lib/libz.so.1 (0x4022f000)
libgcrypt.so.11 => /usr/lib/libgcrypt.so.11 (0x4024d000)
$ ldd `which gnutls-cli`
libgnutls.so.26 => /usr/lib/libgnutls.so.26 (0x40025000)
libgnutls-extra.so.26 => /usr/lib/libgnutls-extra.so.26 (0x400a2000)
libtasn1.so.3 => /usr/lib/libtasn1.so.3 (0x400b4000)
libgcrypt.so.11 => /usr/lib/libgcrypt.so.11 (0x400c9000)
libgpg-error.so.0 => /usr/lib/libgpg-error.so.0 (0x40136000)
libc.so.6 => /lib/libc.so.6 (0x40141000)
libz.so.1 => /usr/lib/libz.so.1 (0x40268000)
libopencdk.so.10 => /usr/lib/libopencdk.so.10 (0x40286000)
libnsl.so.1 => /lib/libnsl.so.1 (0x402ac000)
/lib/ld-linux.so.2 (0x40000000)
$ gnutls-cli --version
gnutls-cli (GnuTLS) 2.2.2
$ gnutls-cli -p 994 irc.wibble.org
Resolving 'irc.wibble.org'...
Connecting to 'XX.XX.XX.XX:994'...
- Ephemeral DH using prime of 520 bits, secret key of 502 bits, and peer's public key is 512 bits.
- Certificate type: X.509
- Got a certificate list of 1 certificates.
- Certificate[0] info:
# The hostname in the certificate matches 'irc.wibble.org'.
# valid since: Thu Jul 26 20:38:05 BST 2007
# expires at: Wed May 26 14:09:49 BST 1971
# fingerprint: 29:AE:68:43:E4:1E:06:AF:19:35:93:76:8E:5A:4B:BA
# Subject's DN: C=UK,ST=Under The Bonfire,O=Wibble,CN=irc.wibble.org
# Issuer's DN: O=Wibble,EMAIL=root@wibble.org,L=WibbleHQ,ST=Under The Bonfire,C=UK
- Peer's certificate issuer is unknown
- Peer's certificate is NOT trusted
- Version: TLS1.0
- Key Exchange: DHE-RSA
- Cipher: AES-128-CBC
- MAC: SHA1
- Compression: NULL
- Handshake was completed
- Simple Client Mode:
NOTICE AUTH :*** Looking up your hostname...
NOTICE AUTH :*** Found your hostname, welcome back
NOTICE AUTH :*** Checking ident
NOTICE AUTH :*** No identd (auth) response
gnutls-cli seems to handshake okay (despite a strange looking expiry date). Any ideas why weechat might be having trouble when using the same library?
|