On Mon, Feb 11, 2019 at 07:33:15PM +0000, sylvain.bertr...@gmail.com wrote: > On Mon, Feb 11, 2019 at 07:04:07PM +0000, Stefan Caunter wrote: > > It's a TLS version issue. Many sites are refusing old TLS from old > > clients. With lynx compiled with 0.9.8 openssl the HTTPS connection > > fails, with 1.0.2 openssl it succeeds. > > You mean that lynx compiled against the latest versions of nettle/gnutls does > not succeed at dealing with recent TLS? > > This is sererely inconsistent. > > So either, there is a wrong use of nettle/gnutls in lynx code or an > horrible bug in nettle/gnutls.
Could it be the deprecated use of gnutls_compression_get in tidy_tls.c??? (which looks like unrelated). ----- /root/fuckmainstreamdistros/src/lynx2.8.9rel.1/src/tidy_tls.c: In function 'SSL_get_current_cipher': /root/fuckmainstreamdistros/src/lynx2.8.9rel.1/src/tidy_tls.c:371:2: warning: 'gnutls_compression_get' is deprecated [-Wdeprecated-declarations] result->compress = gnutls_compression_get(ssl->gnutls_state); ^~~~~~ In file included from /nyan/gnutls/current/include/gnutls/gnutls.h:3337:0, from /root/nyanlinux/src/lynx2.8.9rel.1/./WWW/Library/Implementation/tidy_tls.h:8, from /root/nyanlinux/src/lynx2.8.9rel.1/./WWW/Library/Implementation/HTUtils.h:764, from /root/nyanlinux/src/lynx2.8.9rel.1/src/tidy_tls.c:10: /nyan/gnutls/current/include/gnutls/compat.h:225:1: note: declared here gnutls_compression_get(gnutls_session_t session) _GNUTLS_GCC_ATTR_DEPRECATED; -- Sylvain _______________________________________________ Lynx-dev mailing list Lynx-dev@nongnu.org https://lists.nongnu.org/mailman/listinfo/lynx-dev