{"action":"created","issue":{"url":"https://api.github.com/repos/mirleft/ocaml-tls/issues/293","labels_url":"https://api.github.com/repos/mirleft/ocaml-tls/issues/293/labels{/name}","comments_url":"https://api.github.com/repos/mirleft/ocaml-tls/issues/293/comments","events_url":"https://api.github.com/repos/mirleft/ocaml-tls/issues/293/events","html_url":"https://github.com/mirleft/ocaml-tls/issues/293","id":93630525,"number":293,"title":"wget on nqsb.io fails on Debian (GnuTLS)","user":{"login":"edwintorok","id":721894,"avatar_url":"https://avatars.githubusercontent.com/u/721894?v=3","gravatar_id":"","url":"https://api.github.com/users/edwintorok","html_url":"https://github.com/edwintorok","followers_url":"https://api.github.com/users/edwintorok/followers","following_url":"https://api.github.com/users/edwintorok/following{/other_user}","gists_url":"https://api.github.com/users/edwintorok/gists{/gist_id}","starred_url":"https://api.github.com/users/edwintorok/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/edwintorok/subscriptions","organizations_url":"https://api.github.com/users/edwintorok/orgs","repos_url":"https://api.github.com/users/edwintorok/repos","events_url":"https://api.github.com/users/edwintorok/events{/privacy}","received_events_url":"https://api.github.com/users/edwintorok/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":14,"created_at":"2015-07-07T21:13:25Z","updated_at":"2015-07-09T09:52:45Z","closed_at":null,"body":"Not sure where to report this, curl (OpenSSL) works fine but wget (GnuTLS) gives an error:\r\n```\r\n$ wget https://nqsb.io/nqsbtls-usenix-security15.pdf\r\n--2015-07-08 00:09:28--  https://nqsb.io/nqsbtls-usenix-security15.pdf\r\nResolving nqsb.io (nqsb.io)... 198.167.222.201\r\nConnecting to nqsb.io (nqsb.io)|198.167.222.201|:443... connected.\r\nGnuTLS: A TLS fatal alert has been received.\r\nGnuTLS: received alert [47]: Illegal parameter\r\nUnable to establish SSL connection.\r\n$ wget --version\r\nGNU Wget 1.16 built on linux-gnu.\r\n\r\n+digest +https +ipv6 +iri +large-file +nls +ntlm +opie +psl +ssl/gnutls\r\n[...]\r\n```\r\n\r\nTried some wget flags but no good:\r\n```\r\nwget --secure-protocol=TLSv1_2 https://nqsb.io/nqsbtls-usenix-security15.pdf\r\n--2015-07-08 00:12:21--  https://nqsb.io/nqsbtls-usenix-security15.pdf\r\nResolving nqsb.io (nqsb.io)... 198.167.222.201\r\nConnecting to nqsb.io (nqsb.io)|198.167.222.201|:443... connected.\r\nAborted (core dumped)\r\n```\r\n\r\nUpdate: this works:\r\n```\r\nwget --secure-protocol=TLSv1 https://nqsb.io/nqsbtls-usenix-security15.pdf\r\n```"},"comment":{"url":"https://api.github.com/repos/mirleft/ocaml-tls/issues/comments/119893317","html_url":"https://github.com/mirleft/ocaml-tls/issues/293#issuecomment-119893317","issue_url":"https://api.github.com/repos/mirleft/ocaml-tls/issues/293","id":119893317,"user":{"login":"hannesm","id":228456,"avatar_url":"https://avatars.githubusercontent.com/u/228456?v=3","gravatar_id":"","url":"https://api.github.com/users/hannesm","html_url":"https://github.com/hannesm","followers_url":"https://api.github.com/users/hannesm/followers","following_url":"https://api.github.com/users/hannesm/following{/other_user}","gists_url":"https://api.github.com/users/hannesm/gists{/gist_id}","starred_url":"https://api.github.com/users/hannesm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hannesm/subscriptions","organizations_url":"https://api.github.com/users/hannesm/orgs","repos_url":"https://api.github.com/users/hannesm/repos","events_url":"https://api.github.com/users/hannesm/events{/privacy}","received_events_url":"https://api.github.com/users/hannesm/received_events","type":"User","site_admin":false},"created_at":"2015-07-09T09:52:45Z","updated_at":"2015-07-09T09:52:45Z","body":"yes, I found the dumbfw code as well, and it indeed still prefixes the padding data with a length. do you want to report an issue at gnutls.org, or should I?"}}