git fetch fails because of gnutls_handshake

[Clemens Lang]

Hi,

On Sat, Oct 29, 2016 at 02:48:32PM +0200, René J.V. Bertin wrote:
> Hi,
> 
> I'm seeing this on one of my systems (haven't been able to try others yet):
> 
> {{{
> DEBUG: Executing org.macports.fetch (git)
> --->  git-2.10.1.tar.gz doesn't seem to exist in /opt/local/var/macports/distfiles/git
> --->  Attempting to fetch git-2.10.1.tar.gz from https://www.kernel.org/pub/software/scm/git/
>   % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
>                                  Dload  Upload   Total   Spent    Left  Speed
> 100   178  100   178    0     0    419      0 --:--:-- --:--:-- --:--:--   418
>   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
> DEBUG: Fetching distfile failed: gnutls_handshake() failed: Handshake failed
> }}}
> 
> As far as I can tell the fetch procedure uses a curl function provided
> by Pextlib, which in turn uses the host's gnutls libraries. This might
> suggest that those are outdated w.r.t. www.kernel.org, but when I use
> the system curl command the fetch completes without problems.

That's https://trac.macports.org/ticket/51516.


> What could this be due to?

Your system libcurl is too old to talk modern SSL, or you have modified
your system libcurl to use a different library, or you have built
MacPorts against a custom copy of libcurl that uses a SSL library that
cannot talk to kernel.org.

-- 
Clemens