[gnutls-help] Problem of gnutls on armv8

[Zheng, Ruoqin]

Hi
   I want to use curl to request https in an armv8 board ls1046.
  Here is the log:
root # curl -v -k https://192.168.246.2
* Rebuilt URL to: https://192.168.246.2/
*   Trying 192.168.246.2...
* Connected to 192.168.246.2 (192.168.246.2) port 443 (#0)
* found 177 certificates in /etc/ssl/certs/ca-certificates.crt
* ALPN, offering http/1.1
* gnutls_handshake() failed: Bad record MAC
* Closing connection 0
curl: (35) gnutls_handshake() failed: Bad record MAC

  And here is the kernel, the OS is arm32be compiled by yocto.
root # uname -a
Linux ubinux-armv8be 4.1.30-rt34+ #6 SMP Thu Jan 19 19:05:01 JST 2017 armv7b GNU/Linux

Then I found that curl is using gnutls lib, so I check the tls with gnutls-cli-debug:
root # gnutls-cli-debug 192.168.246.2
GnuTLS debug client 3.3.17
Checking 192.168.246.2:443
                             for SSL 3.0 (RFC6101) support... no
                        whether we need to disable TLS 1.2... yes
                        whether we need to disable TLS 1.1... yes
                        whether we need to disable TLS 1.0... yes
                        whether %NO_EXTENSIONS is required... yes
                               whether %COMPAT is required... yes
                             for TLS 1.0 (RFC2246) support... no

Server does not support any of SSL 3.0, TLS 1.0 and TLS 1.1 and TLS 1.2

By the way, I ensure that the server is normal.

So is anyone who met this problem or have any solutions?

Thank you
Zheng





-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/attachments/20170209/ebf4c749/attachment-0001.html>