Recently I tried to open a secured webdav using davs:// and noticed an error telling me, that it doesn't work: (Translated into English) >>> Error: HTTP error: SSL handshake failed: Found a data record paket with illegal version. Please choose another viewer and try again. <<< I traced the error down to gnutls, downgrading to 2.8.6 helped. Reproducible: Always Steps to Reproduce: 1. emerge gnutls-2.10.0 (and latest libsoup and nautilus) 2. start nautilus 3. access a secured webdav: davs://... Background concerning gnutls as follows: Portage 2.1.8.3 (default/linux/x86/10.0, gcc-4.4.4, glibc-2.11.2-r0, 2.6.34-gentoo i686) ================================================================= System Settings ================================================================= System uname: Linux-2.6.34-gentoo-i686-Intel-R-_Core-TM-2_Duo_CPU_T5450_@_1.66GHz-with-gentoo-2.0.1 Timestamp of tree: Mon, 28 Jun 2010 06:00:23 +0000 app-shells/bash: 4.1_p7 dev-java/java-config: 2.1.11 dev-lang/python: 2.6.5-r2, 3.1.2-r3 dev-util/cmake: 2.8.1-r2 sys-apps/baselayout: 2.0.1 sys-apps/openrc: 0.6.1-r1 sys-apps/sandbox: 2.2 sys-devel/autoconf: 2.13, 2.65-r1 sys-devel/automake: 1.8.5-r4, 1.9.6-r3, 1.10.3, 1.11.1 sys-devel/binutils: 2.20.1-r1 sys-devel/gcc: 4.4.4-r1 sys-devel/gcc-config: 1.4.1 sys-devel/libtool: 2.2.10 virtual/os-headers: 2.6.34 ACCEPT_KEYWORDS="x86 ~x86" ACCEPT_LICENSE="* -@EULA PUEL Nero-EULA-US dlj-1.1 sun-bcla-java-vm skype-eula googleearth AdobeFlash-10.1" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=core2 -O2 -pipe -fomit-frame-pointer" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/X11/xkb /var/lib/hsqldb" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/eselect/postgresql /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-march=core2 -O2 -pipe -fomit-frame-pointer" DISTDIR="/usr/portage/distfiles" FEATURES="assume-digests distlocks fixpackages news parallel-fetch protect-owned sandbox sfperms strict unmerge-logs unmerge-orphans userfetch" GENTOO_MIRRORS="http://distfiles.gentoo.org" LANG="de_DE.UTF-8" LC_ALL="de_DE.UTF-8" LDFLAGS="-Wl,-O1" LINGUAS="de" MAKEOPTS="-j3" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/var/lib/layman/x11 /var/lib/layman/gnome /var/lib/layman/tsw-overlay" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="16bit X a52 aac aalib acl acpi alsa ansi anthy ao apache2 applet artworkextra audacious audio avahi bash-completion bluetooth branding bzip2 cairo cdda cddax cddb cdparanoia cdr cli consolekit cpudetection cracklib crypt cups curl cxx dbus dga directfb djvu doc dri dts dv dvb dvd dvdr dvdread dvi dxr3-audio-denoise eds emacs emf encode esd exif fame fat ffmpeg fftw firefox firefox3 flac flash flv fortran ftp fuse gcj gdbm gedit ggi gif gnome gnome-keyring gnome-print gnomecanvas gnomecd gnutls gocr gpac gpg gpm gs gsl gstreamer gtk hal hdri httpd iconv id3tag ieee1394 imagemagick imlib ipv6 jack jadetex java java6 javascript jbig jce john jpeg jpgraph kpathsea ladspa lame latex lcms libcaca libnotify libsamplerate libvisual libwww live lm_sensors lzo mad matroska md5sum mdnsresponder-compat mikmod mmx mmxext modules mp2 mp3 mp4 mp4live mpeg mpeg2 mplayer mudflap musepack nautilus ncurses nemesi networking nls nptl nptlonly nsplugin objc objc++ objc-gc odbc ogg openal opengl openmp pam pcmcia pcre pdf perl php plotutils png pnm policykit ppds pppd print pstoedit pstricks pulseaudio python qt3support qt4 quicktime rar readline reflection rtc samba sdl sensord session sndfile snmp sox speex spell spl sqlite3 srt sse sse2 sse3 sse4a sse5 ssh ssl ssse3 subtitles subversion svg sysfs t1lib tcpd tga theora threads tiff truetype unicode usb v4l v4l2 vorbis webdav win32codecs wireshark wmf x264 x86 xine xinerama xinetd xml xmlrpc xorg xulrunner xv xvid xvmc zeroconf zlib" ALSA_CARDS="hda-intel" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic auth_digest authn_anon authn_dbd authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock dbd deflate dir disk_cache env expires ext_filter file_cache filter headers ident imagemap include info log_config logio mem_cache mime mime_magic negotiation proxy proxy_ajp proxy_balancer proxy_connect proxy_http rewrite setenvif so speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="evdev synaptics mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="de" NETBEANS_MODULES="apisupport harness ide java nb websvccommon cnd dlight enterprise ergonomics groovy identity mobility php profiler ruby" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="intel" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS ================================================================= Package Settings ================================================================= net-libs/gnutls-2.8.6 was built with the following: USE="cxx doc lzo nls zlib -bindist -examples -guile" ================================================================= gnutls version 2.10.0 would emerge with those flags: [ebuild U ] net-libs/gnutls-2.10.0 [2.8.6] USE="cxx doc lzo nls zlib -bindist -examples -guile" 0 kB
Same error here with epiphany browser and also with Evolution WebDAV contacts via https.
This could be the fix, but I cannot test it just now: http://git.gnome.org/browse/libsoup/commit/?id=01a43ad9824fba77384534c6d588e0e0d653986e
I have tested that patch, and it works for epiphany.
Yep, the libsoup patch fixes HTTPS connections through webkit too (and also applies cleanly to net-libs/libsoup-2.28.2) as reported in bug 326055.
(In reply to comment #2) > This could be the fix, but I cannot test it just now: > http://git.gnome.org/browse/libsoup/commit/?id=01a43ad9824fba77384534c6d588e0e0d653986e > Indeed this fixes the bug. I just overlayed that ebuild and patched it. Hope this patch will come to portage the next days.
Then don't close it :)
*** This bug has been marked as a duplicate of bug 307343 ***
