Re: git-fetch in 1.5.4 fails versus 1.5.3.8

On Wed, 06 Feb 2008 23:23:33 -0500, Jeff King wrote:

On Wed, Feb 06, 2008 at 09:56:35PM +0000, Anand Kumria wrote:

quoted

With GIT_SSL_NO_VERIFY defined, it fails with:

$ GIT_SSL_NO_VERIFY=1 ../git/git-fetch richard error:
gnutls_handshake() failed: ASN1 parser: Element was not found.
(curl_result = 35, http_code = 0, sha1 =
510567ca41e201253445528ca6eb89ed43e71fce) Getting pack list for
https://server.example.com/~richard/newfoo.git error:
gnutls_handshake() failed: ASN1 parser: Element was not found. Getting
alternates list for https://server.example.com/~richard/newfoo.git
error: Unable to find 510567ca41e201253445528ca6eb89ed43e71fce under
https://server.example.com/~richard/newfoo.git Cannot obtain needed
object 510567ca41e201253445528ca6eb89ed43e71fce fatal: Fetch failed.

OK, I was finally able to reproduce your bug. It seems that it _only_
happens when using curl built against gnutls. I built against the
libcurl4-openssl-dev in Debian unstable, and the problem goes away.

Can you confirm that building using the openssl version of curl fixes
the problem?

Confirmed.

Thanks for figuring out how to reproduce it ... how did you btw?

Googling for your error message turns up only one other instance: a bug
in pidgin where the result was "this seems like a bug in gnutls." I hate
to say "it's not our bug" without knowing exactly what is causing it,
though. And it does seem odd that it works with 1.5.3.8. I wonder if
there is some difference in the way we are calling curl that matters.

It appears that git 1.5.3.8 on Debian links to libcurl3-gnutls whereas, 
at least for me, git 1.5.4 on Debian links to libcurl4-gnutls 
(or libcurl4-openssl).

I agree with you, it is a bit problematic when the library (curl) relies
on another library (gnutls) and the bottom one is having a problem.

Gerrit - since I seem to be able to reproduce this fairly easily - would
it be useful to you to have me do anything to track this down. Or will you
switch the Debian build to openssl?

Thanks for looking into this Jeff.

Regards,
Anand