Raspbian Wheezy gnutls ciphers outdated

[renat2017]

Hi!

We're using Raspbian wheezy and found that UZBL browser (and wget, and gnutls-cli) doesn't support ciphers used by CloudFlare, and we get SSL errors.

Code: Select all

~ $ gnutls-cli screenly.io
Resolving 'screenly.io'...
Connecting to '104.27.189.73:443'...
*** Fatal error: A TLS fatal alert has been received.
*** Received alert [40]: Handshake failed
*** Handshake has failed
GnuTLS error: A TLS fatal alert has been received.

Did anybody encounter anything similar? What is the best resolution for this?

Thanks

[mfa298]

Hi!

We're using Raspbian wheezy and found that UZBL browser (and wget, and gnutls-cli) doesn't support ciphers used by CloudFlare, and we get SSL errors.

Code: Select all

~ $ gnutls-cli screenly.io
Resolving 'screenly.io'...
Connecting to '104.27.189.73:443'...
*** Fatal error: A TLS fatal alert has been received.
*** Received alert [40]: Handshake failed
*** Handshake has failed
GnuTLS error: A TLS fatal alert has been received.

Did anybody encounter anything similar? What is the best resolution for this?

Thanks

Wheezy is pretty out of date now so will be using some very old packages. The best solution would probably be to update your system to use a newer Jessie based install. If you really want to stay with Wheezy then you might be able to manually compile an updated version of the library, but that may lead to other issues.

[renat2017]

Thanks for your response.

I was able to make it work using UZBL installed from Jessie, and it worked fine, but we need to distribute it to a large fleet of raspberry pis of different configurations so I was seeking for not so risky solution.

But thanks, anyhow.

Another solution I have in mind is to build an all-in-one uzbl executable with all dependencies are compiled in statically.

[runboy93]

Update to Jessie

[renat2017]

For me working solution was to recompile all necessary debs against libgnutls28-dev instead of libgnutls27.

Thanks for help!

[mfa298]

You really ought to consider upgrading the fleet to Jessie as Wheezy is getting pretty old now so you're likely to have other issues going forward. It may not be an immediate upgrade but start planning for it before the next issue comes up.