On Mon, 29 Mar 2010, Faye Gibbins wrote:

When trying to collect a https address, e.g:

lftp -c "get https://www.example.com/foo.tar.gz -o /tmp/foo.tar.gz"

lftp reports:

fgibbins$ lftp -c "get https://www.example.com/foo.tar.gz -o
/tmp/foo.tar.gz"
/usr/lib/libgnutls.so.13: symbol gcry_cipher_setkey, version GCRYPT_1.2
not defined in file libgcrypt.so.11 with link time reference
get: https - not supported protocol
fgibbins$

(Some domain names have been changed to protect the innocent)

Any thoughts on how to fix this?

PS. According to our yum command we are up to date and have:

gnutls-1.4.1-3.el5_4.8
lftp-3.7.11-4.el5
libgcrypt-1.2.3-1

It is broken on SL5.3 as well.
I have libgcrypt-1.2.4-1.el5 but have the same problem on both i386 and x86_64.

SL5.4 has libgcrypt-1.4.4-5.el5.
Installing that on SL53 seems to fix the problem.

I suspect that the latest gnutls (with the fix for CVE-2009-3555)
is incompatible with libgcrypt-1.2

--
Dr. Andrew C. Aitchison         Computer Officer, DPMMS, Cambridge
[email protected]   http://www.dpmms.cam.ac.uk/~werdna

Reply via email to