<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Running the test suite on gnutls on 10.6.8 shows one failure:</div><div><br></div><div><div>FAIL: srp</div><div><br></div><div><br></div><div>So indeed it's right where I thought the error was, in that srp authentication module. Maybe that same module is broken on other systems too... to be discovered.</div><div><br></div><div>luckily there is a way to disable that module in gnutls, so perhaps that's a way out until this gets sorted:</div><div><br></div><div>--disable-srp-authentication</div></div><div><br></div><div>Ken</div><div><br></div><br><div><div>On 2019-01-18, at 7:33 PM, Ken Cunningham wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">when I downgraded to gnutls 3.5.x (which required rolling back to the last libidn2 due to a minor abi change) surf and epiphany both worked again.<div class=""><br class=""></div><div class="">I’m still puzzled — hard to debug.</div><div class=""><br class=""></div><div class="">Ken<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Jan 18, 2019, at 5:45 PM, Marius Schamschula <<a href="mailto:lists@schamschula.com" class="">lists@schamschula.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Ken,<div class=""><br class=""></div><div class="">I just installed for surf and epiphany. I tested with my own websites that are using letsencrypt certificates.</div><div class=""><br class=""></div><div class="">Indeed, both browsers are broken, in the case of epiphany, I couldn’t even download the http version w/o an error, as it still tried pulling an external resource using https.</div><div class=""><br class=""></div><div class="">However, I doubt that the issue is with gnutls: I used both aria2 +gnutls+sqlite3 (my default build) and curl +gnutls to pull down two of my https home pages as well as <a href="http://github.com/macports/" class="">gitHub.com/macports/</a> w/o any issues.</div><div class=""><br class=""></div><div class="">The ABI for gnutls 3.6.x is a superset of version 3.5.x, no previous symbols have been removed or modified, only new functionality has been added:</div><div class=""><br class=""></div><div class=""><a href="https://lists.gnupg.org/pipermail/gnutls-devel/2017-August/008484.html" class="">https://lists.gnupg.org/pipermail/gnutls-devel/2017-August/008484.html</a></div><div class=""><br class=""><div class="">
<div style="font-family: Helvetica; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-variant-east-asian: normal; font-variant-position: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class="">Marius</div><div class="">--</div><div class="">Marius Schamschula</div><div class=""><br class=""></div></div><br class="Apple-interchange-newline"><br class="Apple-interchange-newline">
</div>
<div class=""><br class=""><blockquote type="cite" class=""><div class="">On Jan 18, 2019, at 6:08 PM, Ken Cunningham <<a href="mailto:ken.cunningham.webuse@gmail.com" class="">ken.cunningham.webuse@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">I’m not sure which port is causing this error I’m seeing since recent updates.<br class=""><br class="">To see it, use something like epiphany or surf<br class=""><br class="">surf <a href="http://www.github.com/" class="">www.github.com</a><br class="">epiphany <a href="http://www.github.com/" class="">www.github.com</a><br class=""><br class=""><br class="">I think the error is in gnutls, maybe in libidn2?<br class=""><br class="">I’m narrowing it down to perhaps the srp authentication module, but I’m out of my depth to an extent.<br class=""><br class="">i’m not sure yet if it’s a MacPorts thing, or some new bug that slipped into gnutls.<br class=""><br class="">Anyway, it seems to stop the use of things that use gnutls against some authenticating websites.<br class=""><br class="">Ken</div></div></blockquote></div><br class=""></div></div></div></blockquote></div><br class=""></div></div></blockquote></div><br></body></html>