Bug 588882

Summary:	www-client/lynx-2.8.9_pre6 Unable to complete SSL handshake says "GNUTLS/3.3.19"
Product:	Gentoo Linux	Reporter:	Daa Jaa <dREPLACEeLETTEReEjBYeLETTEReA>
Component:	Current packages	Assignee:	Sergei Trofimovich (RETIRED) <slyfox>
Status:	RESOLVED OBSOLETE
Severity:	critical	CC:	alonbl
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
See Also:	https://bugs.gentoo.org/show_bug.cgi?id=604526
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	Relevant section of Lynx.trace with error message from GNUTLS (?)

Description Daa Jaa 2016-07-15 12:05:18 UTC

I can only access to https sites for which the message "SSL error:The certificate is NOT trusted. The certificate issuer is unknown. -Continue? (n)" is *shown*. Otherwise, it fails without error message (see the attached lynx.trace file)

It seems there is a patch to apply, see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=785383

Also, it would be good to first make a upstream bump to www-client/lynx-2.8.9_pre9 ...

Also see possible symptoms in http://lynx.browser.org/current/README.sslcerts

Reproducible: Always

Steps to Reproduce:
1. lynx -trace https://bugs.gentoo.org (also works with bugs.debian.org and many other https web site with valid certificate)
2.
3.
Actual Results:  
parse_arg(arg_name=https://bugs.gentoo.org, mask=1, count=2)
parse_arg startfile:https://bugs.gentoo.org

Looking up bugs.gentoo.org
Making HTTPS connection to bugs.gentoo.org
Retrying connection without TLS.
Looking up bugs.gentoo.org
Making HTTPS connection to bugs.gentoo.org
Alert!: Unable to make secure connection to remote host.

lynx: Can't access startfile https://bugs.gentoo.org/

Expected Results:  
parse_arg(arg_name=https://bugs.gentoo.org, mask=2, count=2)
parse_arg startfile:https://bugs.gentoo.org

Original User-Agent header : [39]Lynx/2.8.9dev.6 libwww-FM/2.14 SSL-MM/1.4.1 GNUTLS/3.3.19

This is a regression. E.g., www-client/lynx-2.8.6-r2 works fine on bugs.gentoo.org and bugs.debian.org

Comment 1 Daa Jaa 2016-07-15 12:06:55 UTC

Created attachment 440758 [details]
Relevant section of Lynx.trace with error message from GNUTLS (?)

Comment 2 Daa Jaa 2016-07-15 12:10:25 UTC

Same problem with the webmail from my employer (lynx runs on a computer at work)

Comment 3 Alon Bar-Lev (RETIRED) gentoo-dev

2017-03-11 20:42:01 UTC

What about lynx-2.8.9_pre11?

Comment 4 Daa Jaa 2017-03-28 12:02:58 UTC

My sabayon linux install currently does not recognize any certificate issuer, so I check if this bug is still happening or not., sorry.

I'll try to fix first my certificate mess.

Comment 5 Thomas Groman 2019-12-14 04:29:38 UTC

This bug is a possible duplicate of 604526

Comment 6 Sergei Trofimovich (RETIRED) gentoo-dev

2021-01-23 14:22:24 UTC

`lynx https://www.gentoo.org/` seems to just work for me on lynx-.2.9.0_pre6. Closing as OBSOLETE. Please reopen or file a new bug if it's still broken for you.