Re: GnuTLS issue (Mandos Server/Client)

2014-04-04 Thread Nikos Mavrogiannopoulos
On Thu, 2014-04-03 at 11:14 -0600, Nathanael D. Noblet wrote: Does it really use TLS with openpgp certificates? If yes, I doubt you could make 2.8.5 interoperate with gnutls 3.1.20. GnuTLS was modified in 3.1.x to adhere with RFC6091 which was incompatible the previous attempt to have

Re: GnuTLS issue (Mandos Server/Client)

2014-04-03 Thread Nikos Mavrogiannopoulos
On Wed, 2014-04-02 at 10:50 -0600, Nathanael D. Noblet wrote: CentOS 6 = gnutls 2.8.5 F20 = gnutls 3.1.20 The server is a python app and sets the priority string as follows: priority=SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP this is fed to some gnutls function somewhere in the stack. Does

Re: GnuTLS issue (Mandos Server/Client)

2014-04-03 Thread Nathanael D. Noblet
On Thu, 2014-04-03 at 16:05 +0200, Nikos Mavrogiannopoulos wrote: On Wed, 2014-04-02 at 10:50 -0600, Nathanael D. Noblet wrote: CentOS 6 = gnutls 2.8.5 F20 = gnutls 3.1.20 The server is a python app and sets the priority string as follows:

GnuTLS issue (Mandos Server/Client)

2014-04-02 Thread Nathanael D. Noblet
Hello, I'm working on getting a package (mandos) included in Fedora/EPEL. Currently its heavily focused on debian based distros so I'm not ready for a review. However I have it working in a few situations but have some issues in others. I'm hoping someone here may be able to shed light on what

Re: GnuTLS issue (Mandos Server/Client)

2014-04-02 Thread Adam Williamson
On Wed, 2014-04-02 at 10:50 -0600, Nathanael D. Noblet wrote: Hello, I'm working on getting a package (mandos) included in Fedora/EPEL. Currently its heavily focused on debian based distros so I'm not ready for a review. However I have it working in a few situations but have some issues

Re: GnuTLS issue (Mandos Server/Client)

2014-04-02 Thread Nathanael D. Noblet
On Wed, 2014-04-02 at 10:15 -0700, Adam Williamson wrote: Well, have you tried the 'obvious' - building the newer gnutls on CentOS 6 (or the older on Fedora 20) and building mandos against that, to see if the issue is in gnutls or somewhere else in the 'base system'? That'd narrow it down at

Re: GnuTLS issue (Mandos Server/Client)

2014-04-02 Thread Adam Williamson
On Wed, 2014-04-02 at 11:53 -0600, Nathanael D. Noblet wrote: On Wed, 2014-04-02 at 10:15 -0700, Adam Williamson wrote: Well, have you tried the 'obvious' - building the newer gnutls on CentOS 6 (or the older on Fedora 20) and building mandos against that, to see if the issue is in gnutls