[gnutls-help] No supported cipher suites have been found.

Mike Mestnik cheako+gnutls at mikemestnik.net
Mon Dec 7 10:09:28 CET 2015


Thanks for the tip.  I've changed my test to match this example and
have had no change in results.

Are there any examples of a server in C /w a gnutls-cli connecting?
That is a working one I can compare my example too.

This shows the clients error, and on the server the error out put was buffered.
https://travis-ci.org/cheako/ihlt/builds/95305836#L534
https://travis-ci.org/cheako/ihlt/builds/95305836#L550

Note that the fifth and last connection try from perl is not shown.

The valgrind error, invalid free server.c:L424, is also not anything of note:
https://github.com/cheako/ihlt/blob/4437c7872bebc333198e7fa77c4ed2b8aaf63b95/src/server.c#L424

It's just the last line prior to receiving a kill.

On Mon, Dec 7, 2015 at 2:30 AM, Nikos Mavrogiannopoulos <nmav at gnutls.org> wrote:
> You can test gnutls-serv and gnutls-cli in the gnutls distribution
> with the following options:
> cd doc/credentials && ./../src/gnutls-serv --pgpkeyfile
> openpgp/sec.asc --pgpcertfile openpgp/pub.asc --dhparams params.pem
> --priority "NORMAL:+DHE-DSS:+SIGN-DSA-SHA256:+SIGN-DSA-SHA1:+CTYPE-OPENPGP"
>
> cd src && ./gnutls-cli localhost -p 5556 --insecure --priority
> "NORMAL:+DHE-DSS:+SIGN-DSA-SHA256:+SIGN-DSA-SHA1:+CTYPE-OPENPGP"
>
>
> regards,
> Nikos
>
> On Mon, Dec 7, 2015 at 7:49 AM, Mike Mestnik
> <cheako+gnutls at mikemestnik.net> wrote:
>> From a tip on IRC, I've included the results of a test from the
>> gnutls-cli application.  This is to rule out an issue where a non cert
>> type supporting client might be causing problems.
>>
>> https://travis-ci.org/cheako/ihlt/builds/95292899
>>
>> At the end, when the other connections from perl fail, there is a test
>> from gnutls-client.  Same failure.
>>
>> Is there an issue with non cert type clients?  Would that also be
>> mapped to "No supported cipher suites..." error?  Can i have a patch
>> where this error has it's own message?
>>
>> On Wed, Dec 2, 2015 at 7:54 PM, Mike Mestnik
>> <cheako+gnutls at mikemestnik.net> wrote:
>>> I'm writing an example application using gnutls and I'm wondering how
>>> to get SSL support for RFC 6091, as found in gnutls.
>>>
>>> https://github.com/cheako/ihlt/tree/24f6f08cf7c4c118550858718f0a3bb07d3bfa6b
>>>
>>> # This gives the same error as [1]perl, so I'm thinking I've a genuine
>>> problem with my implementation of the echo server.
>>> gnutls-cli -p 4458 --pgpkeyfile=example/openpgp-secret.txt
>>> --pgpcertfile=example/openpgp-server.txt localhost
>>>
>>> See also:
>>> 1. http://www.perlmonks.org/?node_id=1149241
>>
>> _______________________________________________
>> Gnutls-help mailing list
>> Gnutls-help at lists.gnutls.org
>> http://lists.gnupg.org/mailman/listinfo/gnutls-help



More information about the Gnutls-help mailing list