[gnutls-help] Problem of gnutls on armv8

[Nikos Mavrogiannopoulos]

On Thu, Feb 9, 2017 at 3:41 AM, Zheng, Ruoqin
<zhengrq.fnst at cn.fujitsu.com> wrote:
> Hi
>
>    I want to use curl to request https in an armv8 board ls1046.
>
>   Here is the log:
>
> root # curl -v -k https://192.168.246.2
>
> * Rebuilt URL to: https://192.168.246.2/
>
> *   Trying 192.168.246.2...
>
> * Connected to 192.168.246.2 (192.168.246.2) port 443 (#0)
>
> * found 177 certificates in /etc/ssl/certs/ca-certificates.crt
>
> * ALPN, offering http/1.1
>
> * gnutls_handshake() failed: Bad record MAC
>
> * Closing connection 0
>
> curl: (35) gnutls_handshake() failed: Bad record MAC
>
>
>
>   And here is the kernel, the OS is arm32be compiled by yocto.
>
> root # uname -a
>
> Linux ubinux-armv8be 4.1.30-rt34+ #6 SMP Thu Jan 19 19:05:01 JST 2017 armv7b
> GNU/Linux

There are few new optimizations for gnutls in aarch64 which could be
in effect. You can test whether this is the culprit try the same tests
that you have with the environment variable GNUTLS_CPUID_OVERRIDE=1.
If that still fails, the issue could be on a different place. I'd
suggest then to try the following:
1. compile the nettle library, and run make check
2. compile the gnutls library and run make check

regards,
Nikos