With net-libs/gnutls-2.8.1 installed and net-im/pidgin-2.5.6 build with the gnutls USE flag everything seems to work but Jabber connections fail: The connection is established and dies after a second cause of TLS errors (A message about the wrong amount of data coming from the TLS appears if pidgin is run from the terminal). Downgrading to net-libs/gnutls-2.6.6 fixes the issue. I had a similar problem with gnutls-2.8.0 but that version was dropped quickly due to the bug described in http://bugs.gentoo.org/show_bug.cgi?id=272388 Reproducible: Always Steps to Reproduce: Portage 2.2_rc33 (default/linux/amd64/2008.0/desktop, gcc-4.3.3, glibc-2.10.1-r0, 2.6.30-gentoo x86_64) ================================================================= System uname: Linux-2.6.30-gentoo-x86_64-Intel-R-_Core-TM-2_Duo_CPU_T7300_@_2.00GHz-with-gentoo-2.0.1 Timestamp of tree: Thu, 11 Jun 2009 06:00:01 +0000 app-shells/bash: 4.0_p24 dev-java/java-config: 2.1.8-r1 dev-lang/python: 2.4.6, 2.5.4-r3, 2.6.2-r1 dev-python/pycrypto: 2.0.1-r8 dev-util/cmake: 2.6.4 sys-apps/baselayout: 2.0.1 sys-apps/openrc: 0.4.3-r3 sys-apps/sandbox: 2.0 sys-devel/autoconf: 2.13, 2.63-r1 sys-devel/automake: 1.5, 1.7.9-r1, 1.9.6-r2, 1.10.2, 1.11 sys-devel/binutils: 2.19.1-r1 sys-devel/gcc-config: 1.4.1 sys-devel/libtool: 2.2.6a virtual/os-headers: 2.6.29 ACCEPT_KEYWORDS="amd64 ~amd64" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=core2 -mtune=core2 -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/eselect/postgresql /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /etc/udev/rules.d" CXXFLAGS="-march=core2 -mtune=core2 -O2 -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="distlocks fixpackages parallel-fetch preserve-libs protect-owned sandbox sfperms strict unmerge-orphans userfetch" GENTOO_MIRRORS="http://linux.rz.ruhr-uni-bochum.de/download/gentoo-mirror/ http://lug.mtu.edu/gentoo/ ftp://distro.ibiblio.org/pub/linux/distributions/gentoo/ http://gentoo.mirrors.pair.com/" LANG="en_US" LC_ALL="en_US.UTF-8" LDFLAGS="-Wl,-O1" LINGUAS="en de" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage/layman/bazaar /usr/local/portage/layman/sunrise /usr/local/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="X X509 a52 aac aalib acl acpi administrator aim alsa amarok amazon amd64 ao apache2 applet async audiofile autoipd automount avahi bash-completion berkdb bluetooth bogofilter bonjour branding bzip2 cairo canberra caps cdb cddb cdio cdparanoia cdr chroot cleartype cli colordiff cracklib crypt cscope css cups curl cvs daap dbus device-mapper dhclient disk-partition dri dts dvd dvdr dvdread eds emboss encode esd evo exif expat ext4 fam fat ffmpeg firefox flac fontconfig fortran fuse galago gconf gd gdbm gdm gedit geoip gif gimp glade glib gmail gmp gnome gnome-keyring gnutls gpg gphoto2 gpm grub gstreamer gtk gtkhtml gzip hal hdaps hddtemp ibam icons iconv icq id3 id3tag imagemagick imap imlib imlib2 ipod ipv6 isdnlog jabber java6 javascript john jpeg jpeg2k json kpathsea lame laptop latex libgda libnotify libsamplerate libwww lm_sensors loop-aes lvm mad maildir matroska mdnsresponder-compat midi mikmod mime mjpeg mmap mmx mng mono moonlight mozdevelop mp3 mp4 mpeg mpeg2 mplayer msn mudflap multilib music musicbrainz mysql mysqli nautilus ncurses network networkmanager nfs nls nptl nptlonly nsplugin ntfs ntp obex offensive ogg ogg123 openal opengl openid openmp oscar pam pango parport parted pcmcia pcre pdf pdo perl php pidgin pixmaps plugins png podcast pop posix postgres postscript ppds pppd pulseaudio python pyzord qemu qt3 qt3support qt4 query-browser quicktime rar rdesktop readline reflection reiserfs rss samba sdl session sharedmem silc simplexml smp sndfile sockets spell spl sql sqlite sqlite3 sse sse2 ssl startup-notification stream subversion svg sysfs syslog t1lib taglib tagwriting talkfilters tcpd tetex theora threads tidy tiff totem transcode truetype twolame type1 unicode unzip upnp usb v4l2 vcd vcdx vhosts vim-syntax vnc vorbis wav webdav webdav-neon wifi wmf wps wxwindows x264 xattr xcb xcf xcomposite xft xine xinerama xml xmlrpc xorg xosd xpm xrandr xscreensaver xulrunner xv xvid yahoo zeroconf zip zlib" ALSA_CARDS="hda-intel" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en de" USERLAND="GNU" VIDEO_CARDS="intel vesa" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, MAKEOPTS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Jürgen, could you maybe add those messages appearing in the command line to this bug?
The errors look like this: I get a bunch of (21:19:23) jabber: xmlParseChunk returned warning 100 (don't know how critical that is) and finally (21:19:23) jabber: Found bytestream proxy server: proxy.eu.jabber.org (21:19:23) jabber: Sending (ssl): <iq type='get' id='purpleb77e8230' to='proxy.eu.jabber.org'><query xmlns='http://jabber.org/protocol/bytestreams'/></iq> (21:19:23) jabber: xmlParseChunk returned warning 100 (21:19:23) util: Writing file accounts.xml to directory /home/tante/.purple (21:19:23) util: Writing file /home/tante/.purple/accounts.xml (21:19:24) gnutls: receive failed: A TLS fatal alert has been received. (21:19:24) jabber: Disconnected: Input/output error
Please report this problem to <gnutls-devel@gnu.org> mailing list. (See http://lists.gnu.org/mailman/listinfo/gnutls-devel.)
There is a corresponding bug in the pidgin trac here: http://developer.pidgin.im/ticket/9338
This is a bug in gnutls and not pidgin. See http://lists.gnu.org/archive/html/gnutls-devel/2009-06/msg00022.html for the discussion and http://git.savannah.gnu.org/cgit/gnutls.git/commit/?id=c7e003ad9427c655a1b559baff1239a2c1907f32 for a fix.
This bug should be fixed in net-libs/gnutls-2.8.2.