Ken, For gnutls 3.6.6 the test suite runs clean under High Sierra: only a few XFAIL, not a single FAIL.
Marius -- Marius Schamschula > On Jan 26, 2019, at 9:03 PM, Ken Cunningham <[email protected]> > wrote: > > Running the test suite on gnutls on 10.6.8 shows one failure: > > FAIL: srp > > > So indeed it's right where I thought the error was, in that srp > authentication module. Maybe that same module is broken on other systems > too... to be discovered. > > luckily there is a way to disable that module in gnutls, so perhaps that's a > way out until this gets sorted: > > --disable-srp-authentication > > Ken > > > On 2019-01-18, at 7:33 PM, Ken Cunningham wrote: > >> when I downgraded to gnutls 3.5.x (which required rolling back to the last >> libidn2 due to a minor abi change) surf and epiphany both worked again. >> >> I’m still puzzled — hard to debug. >> >> Ken >> >>> On Jan 18, 2019, at 5:45 PM, Marius Schamschula <[email protected] >>> <mailto:[email protected]>> wrote: >>> >>> Ken, >>> >>> I just installed for surf and epiphany. I tested with my own websites that >>> are using letsencrypt certificates. >>> >>> Indeed, both browsers are broken, in the case of epiphany, I couldn’t even >>> download the http version w/o an error, as it still tried pulling an >>> external resource using https. >>> >>> However, I doubt that the issue is with gnutls: I used both aria2 >>> +gnutls+sqlite3 (my default build) and curl +gnutls to pull down two of my >>> https home pages as well as gitHub.com/macports/ >>> <http://github.com/macports/> w/o any issues. >>> >>> The ABI for gnutls 3.6.x is a superset of version 3.5.x, no previous >>> symbols have been removed or modified, only new functionality has been >>> added: >>> >>> https://lists.gnupg.org/pipermail/gnutls-devel/2017-August/008484.html >>> <https://lists.gnupg.org/pipermail/gnutls-devel/2017-August/008484.html> >>> >>> Marius >>> -- >>> Marius Schamschula >>> >>> >>> >>> >>>> On Jan 18, 2019, at 6:08 PM, Ken Cunningham >>>> <[email protected] <mailto:[email protected]>> >>>> wrote: >>>> >>>> I’m not sure which port is causing this error I’m seeing since recent >>>> updates. >>>> >>>> To see it, use something like epiphany or surf >>>> >>>> surf www.github.com <http://www.github.com/> >>>> epiphany www.github.com <http://www.github.com/> >>>> >>>> >>>> I think the error is in gnutls, maybe in libidn2? >>>> >>>> I’m narrowing it down to perhaps the srp authentication module, but I’m >>>> out of my depth to an extent. >>>> >>>> i’m not sure yet if it’s a MacPorts thing, or some new bug that slipped >>>> into gnutls. >>>> >>>> Anyway, it seems to stop the use of things that use gnutls against some >>>> authenticating websites. >>>> >>>> Ken >>> >> >
