[Bug 1020591] Re: subversion and GnuTLS internal error

[John Ryan]

Hi again,

I can add some new information now.  As described by Topaz, if both the
server and the client are running Precise then the problem is observed
as described.  If Oneiric is used as the client then the problem
disappears suggesting that the issue is entirely client-side.  Further,
the version of libneon27-gnutls used by Precise and Oneiric is identical
suggesting that the neon-gnutls library is not the problem (corroborated
by the fact that installing libneon27 and using the LD_PRELOAD trick
also doesn't work in Precise).  However, the version of libgnutls26
between Oneiric and Precise is different and using LD_PRELOAD to load
the Oneiric version of this library solves the problem in Precise.

Strangely however, Quantal also suffers from this problem but it can be
fixed by using LD_PRELOAD to load the libneon27 library.  LD_PRELOADing
the libgnutls26 version from Oneiric doesn't work because
libneon27-gnutls has a dependency on version 2.12 of libgnutls (Oneiric
uses 2.10)!

Here is a summary:

"Out of the box": Oneiric OK, Precise fails, Quantal fails.

Install libneon27 and set LD_PRELOAD=/usr/lib/libneon.so.27: Oneiric OK,
Precise fails, Quantal OK

Set LD_PRELOAD=libgnutls.so.26.16.14 (Oneiric version): Oneric OK,
Precise OK, Quantal fails

Workarounds:

Precise: Download the Oneiric version of libgnutls.so.26.16.14 and set LD_PRELOAD to point to this file.
Quantal: Install libneon27 and set LD_PRELOAD=/usr/bin/libneon.so.27

For the record, the releases have the following versions of the
libraries:

Oneiric
libneon27-gnutls_0.29.6-1 (library version libneon-gnutls.so.27.2.6)
libgnutls26_2.10.5-1ubuntu3.2 (library version libgnutls.so.26.16.14)

Precise
libneon27-gnutls_0.29.6-1 (library version libneon-gnutls.so.27.2.6)
libgnutls26_2.12.14-5ubuntu3.1 (library version libgnutls.so.26.21.8)

Quantal
libneon27-gnutls_0.29.6-3 (library version libneon-gnutls.so.27.2.6)
libgnutls26_2.12.14-5ubuntu4 (library version libgnutls.so.26.21.8)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to subversion in Ubuntu.
https://bugs.launchpad.net/bugs/1020591

Title:
  subversion and GnuTLS internal error

Status in “gnutls26” package in Ubuntu:
  Confirmed
Status in “subversion” package in Ubuntu:
  Confirmed

Bug description:
  Dear all,
  I'm experiencing an interesting bug around gnutls.

  My setup:
  - svn server running apache2+mod_ssl under 12.04 precise (last upgrades done),
  - svn client running 12.04 precise and providing a client ssl certificate,

  The problem:
  upon any svn operation (e.g. svn update), subversion output is:
  svn: OPTIONS of 'https://server/svn/trunk': SSL handshake failed: SSL error: GnuTLS internal error. (https://server)

  however if I use eclipse as my svn client, it works fine (with the
  same client certificate)

  Workaround:
  - reinstall (and force all) the package libgnutls26 version 2.10.5-1ubuntu3.1 from 11.10 Oneiric solves the problem but causes other applications to errors due to the broken libgcrypt11 dependency.

  Has anyone experienced the same problem ?

  Thanks in advance,
  Cheers
  Topaz.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/1020591/+subscriptions