Home / ubuntu / Questions / 186847
In Process
Nyambaa
Asked: 2012-09-12 21:43:16 +0800 CST

"error: gnutls_handshake() failed" when connecting to https servers

  • 772

When I try to connect to any HTTPS server with git, it gives the following error:

error: gnutls_handshake() failed: A TLS packet with unexpected length was received. while accessing ...
fatal: HTTP request failed

I think that maybe some packages that are related to gnutls_handshake have been broken. So, I want to reinstall those.

Which packages can be related to these errors? Or how do I fix this kind of error?

git

3 Answers

  1. Got reason of the problem, it was gnutls package. It's working weird behind a proxy. But openssl is working fine even in weak network. So workaround is that we should compile git with openssl. To do this, run the following commands:

    sudo apt-get update
sudo apt-get install build-essential fakeroot dpkg-dev
sudo apt-get build-dep git
mkdir ~/git-openssl
cd ~/git-openssl
apt-get source git
dpkg-source -x git_1.7.9.5-1.dsc
cd git-1.7.9.5

    (Remember to replace 1.7.9.5 with the actual version of git in your system.)

    Then, edit debian/control file (run the command: gksu gedit debian/control) and replace all instances of libcurl4-gnutls-dev with libcurl4-openssl-dev.

    Then build the package (if it's failing on test, you can remove the line TEST=test from the file debian/rules):

    sudo apt-get install libcurl4-openssl-dev
sudo dpkg-buildpackage -rfakeroot -b

    Install new package:

    i386: sudo dpkg -i ../git_1.7.9.5-1_i386.deb

    x86_64: sudo dpkg -i ../git_1.7.9.5-1_amd64.deb

    Inspired from here: https://github.com/xmendez/wfuzz/wiki/PyCurlSSLBug

    • 98

  2. For me, it ended up being that SSL certificate was self-signed. Give this a try

    git config --global http.sslVerify false

    • 9

  3. This is mentioned in one of the comments to another answer but I feel it needs to be more visible https://askubuntu.com/users/177551/paul-nelson-baker has written a shell script which, for me, resolved this issue.

    The script is available in his repository https://github.com/paul-nelson-baker/git-openssl-shellscript and re-compiles git with openssl instead of gnutls. Read the README for the whole story but it worked for me so thank you Paul.

    • 1