Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-29 Thread jidanni
reopen 638595 thanks AM == Andreas Metzler ametz...@downhill.at.eu.org writes: AM it seems to fix the issue for me, the minimal testcase (lynx -dump AM https://localhost:8443/) now works. Did you try the test cases I listed? No. -- To UNSUBSCRIBE, email to

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-29 Thread Andrew M. Bishop
jida...@jidanni.org writes: reopen 638595 thanks AM == Andreas Metzler ametz...@downhill.at.eu.org writes: AM it seems to fix the issue for me, the minimal testcase (lynx -dump AM https://localhost:8443/) now works. Did you try the test cases I listed? No. I don't know why the problem

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-29 Thread jidanni
# OK, so the gnutls upgrade fixed the segfaults, and the rest is a WWWOFFLE bug. reassign 638595 wwwoffle 2.9f-2.2 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-28 Thread Andreas Metzler
On 2011-08-27 Nikos Mavrogiannopoulos n...@gnutls.org wrote: [...] It is a bug introduced in 2.12.x. Does the attached patch fix the issue? [...] Hello, it seems to fix the issue for me, the minimal testcase (lynx -dump https://localhost:8443/) now works. thanks, cu andreas -- To

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-27 Thread Andreas Metzler
On 2011-08-25 Andrew M. Bishop a...@gedanken.demon.co.uk wrote: [...] A better test is to do the following against your running WWWOFFLE server (you don't need to be online): lynx -dump https://localhost:8443/ ok. That makes it reproducible. gnutls-cli or openssl s_client -connect

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-27 Thread Andreas Metzler
On 2011-08-27 Andreas Metzler ametz...@downhill.at.eu.org wrote: On 2011-08-25 Andrew M. Bishop a...@gedanken.demon.co.uk wrote: [...] Another way to view the problem is to look at the libgnutls functions that WWWOFFLE calls: # ltrace -l /usr/lib/i386-linux-gnu/libgnutls.so \

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-27 Thread Nikos Mavrogiannopoulos
On 08/27/2011 06:58 PM, Andreas Metzler wrote: Hello, I would not be surprised if upstream's response was don't do this, this was never supposed to work but at a quick look I could not find respective reference in the docs either. It is a bug introduced in 2.12.x. Does the attached patch fix

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-26 Thread Andrew M. Bishop
Simon Josefsson si...@josefsson.org writes: a...@gedanken.demon.co.uk (Andrew M. Bishop) writes: One thing that I noticed during the debugging of this problem is that the newly created certificates (above) are described by certtool as Version: 3 but the WWWOFFLE ones are Version: 1. V1 CA

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-26 Thread Simon Josefsson
a...@gedanken.demon.co.uk (Andrew M. Bishop) writes: Simon Josefsson si...@josefsson.org writes: a...@gedanken.demon.co.uk (Andrew M. Bishop) writes: One thing that I noticed during the debugging of this problem is that the newly created certificates (above) are described by certtool as

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-26 Thread Andrew M. Bishop
a...@gedanken.demon.co.uk (Andrew M. Bishop) writes: This is with a vanilla wwwoffle 2.9g - unmodified since released. Looking at the list of functions I can see that there are two gnutls_x509_*_deinit() functions called before the handshake. Calling the first one, gnutls_x509_crt_deinit(),

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-25 Thread Andrew M. Bishop
Andreas Metzler ametz...@downhill.at.eu.org writes: Just to get a straightforword testcase: (SID)root@argenau:/# DEBIAN_FRONTEND=noninteractive apt-get --purge install wwwoffle wwwoffled[22194] Important: WWWOFFLE Demon Version 2.9f (with ipv6,with zlib,with gnutls) started.

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-24 Thread Andrew M. Bishop
Andreas Metzler ametz...@downhill.at.eu.org writes: On 2011-08-20 Andrew M. Bishop a...@gedanken.demon.co.uk wrote: [...] There seems to be a bug with gnutls on the latest Debian (version 2.12.7-6 for me). Taking the example code from the gnutls documentation and compiling it gives me an

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-24 Thread Simon Josefsson
a...@gedanken.demon.co.uk (Andrew M. Bishop) writes: One thing that I noticed during the debugging of this problem is that the newly created certificates (above) are described by certtool as Version: 3 but the WWWOFFLE ones are Version: 1. V1 CA certs should be permitted in latest GnuTLS, but

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-22 Thread Andreas Metzler
On 2011-08-20 Andrew M. Bishop a...@gedanken.demon.co.uk wrote: [...] There seems to be a bug with gnutls on the latest Debian (version 2.12.7-6 for me). Taking the example code from the gnutls documentation and compiling it gives me an SSL server that will not accept connections from

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-22 Thread Andreas Metzler
severity 638595 important thanks On 2011-08-21 jida...@jidanni.org wrote: rename 638595 HTTPS now unusable reassign 638595 libgnutls26 found 638595 2.12.7-6 severity 638595 critical thanks A == Andrew M Bishop a...@gedanken.demon.co.uk writes: A I am having the problems as well now (I

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-22 Thread Andreas Metzler
On 2011-08-20 Andrew M. Bishop a...@gedanken.demon.co.uk wrote: jida...@jidanni.org writes: [...] I just tested it with Linux 2.6 vs. 3.0, same bug, on both of my computers. I suppose an upgrade to a dependency revealed the bug. PS $ wwwoffle https://bugzilla.mozilla.org/ PS Requesting:

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-21 Thread Andrew M. Bishop
jida...@jidanni.org writes: Say, there also was the segfault at 1ee45974 ip b7589e6c sp bf8f4654 error 4 in libgcrypt.so.1 But that is from a different package than gnutls... The library libgcrypt is one of the ones that are linked in when gnutls is used: $ ldd /usr/local/sbin/wwwoffled

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-21 Thread jidanni
rename 638595 HTTPS now unusable reassign 638595 libgnutls26 found 638595 2.12.7-6 severity 638595 critical thanks A == Andrew M Bishop a...@gedanken.demon.co.uk writes: A I am having the problems as well now (I hadn't realised it until you A pointed it out) and I haven't changed my version of

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-20 Thread jidanni
And we find out of dynamic memory in yy_get_next_buffer in https://bugzilla.mozilla.org/show_bug.cgi?id=680630 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=638595 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-20 Thread jidanni
Various truncation states are observed: $ GET https://bugzilla.mozilla.org/ | sed '$!d' /htmlout of dynamic memory in yy_get_next_buffer() $ GET -P https://bugzilla.mozilla.org/ | sed '$!d' $ GET https://bugzilla.wikimedia.org/ | sed '$!d' $ GET -P https://bugzilla.wikimedia.org/ | sed '$!d' $

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-20 Thread Paul Slootman
severity 638595 normal tag 638595 unreproducible thanks On Sat 20 Aug 2011, jida...@jidanni.org wrote: This can't just be a coincidental bug in libgcrypt11, libgnutls26, lyxn, w3m all at the same time. It obviously is a WWWOFFLE bug. Or your system's memory has a glitch, or whatever. If it

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-20 Thread jidanni
PS Or your system's memory has a glitch, or whatever. PS If it obviously a Wwwoffle bug, why have you only now discovered it? And PS only you? I just tested it with Linux 2.6 vs. 3.0, same bug, on both of my computers. I suppose an upgrade to a dependency revealed the bug. PS $ wwwoffle

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-20 Thread Andrew M. Bishop
jida...@jidanni.org writes: PS Or your system's memory has a glitch, or whatever. PS If it obviously a Wwwoffle bug, why have you only now discovered it? And PS only you? I just tested it with Linux 2.6 vs. 3.0, same bug, on both of my computers. I suppose an upgrade to a dependency revealed

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-20 Thread jidanni
Say, there also was the segfault at 1ee45974 ip b7589e6c sp bf8f4654 error 4 in libgcrypt.so.1 But that is from a different package than gnutls... -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#638595: WWWOFFLE HTTPS now unusable

2011-08-19 Thread jidanni
X-debbugs-cc: wwwoffle-us...@gedanken.demon.co.uk, a...@gedanken.demon.co.uk Package: wwwoffle Version: 2.9f-2.2 Severity: grave This can't just be a coincidental bug in libgcrypt11, libgnutls26, lyxn, w3m all at the same time. It obviously is a WWWOFFLE bug. In syslog I see kernel: