Bug#718265: gvfs-backends: fails to mount secure WebDAV: SSL Handshake failed. server supports ECDH only.

2014-03-11 Thread althaser
Hey Sebastian,

Could you please still reproduce this issue with newer version ?

thanks
regards
althaser


Bug#718265: gvfs-backends: fails to mount secure WebDAV: SSL Handshake failed. server supports ECDH only.

2013-07-29 Thread Sebastian Birkl
Package: gvfs-backends
Version: 1.16.3-1
Severity: important

Dear Maintainer,
i tried to mount a secure WebDAV share with GVFS (gvfs-mount and Xfce) and it 
fails with Error mounting location: HTTP Error: SSL handshake failed.
The server supports ECDH ciphers only and the CA is imported into the system 
located at /usr/local/share/ca-certificates.
Server CA is located at http://reb00t.wtf.im/reb00t.crt
WebDAV at https://reb00t.wtf.im/remote.php/webdav/

Wget is also telling me that something is wrong. (dont worry about the ip 
address, just a LAN workaround for a not working nat reflection)
~ $ wget https://reb00t.wtf.im
--2013-07-29 15:26:43--  https://reb00t.wtf.im/
Resolving reb00t.wtf.im (reb00t.wtf.im)... 192.168.2.254
Connecting to reb00t.wtf.im (reb00t.wtf.im)|192.168.2.254|:443... connected.
GnuTLS: A TLS fatal alert has been received.
Unable to establish SSL connection.

nginx config:
ssl_ciphers 
ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES256-SHA:!MEDIUM:!LOW:!RC4:!aNULL:!MD5:!kEDH;

Iceweasel / Icedove and Android can connect without a problem.
And i am not planning to enable other ciphers.

If i am doing something wrong, please tell me.

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.9-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages gvfs-backends depends on:
ii  dconf-gsettings-backend [gsettings-backend]  0.16.1-1
ii  gvfs 1.16.3-1
ii  gvfs-common  1.16.3-1
ii  gvfs-daemons 1.16.3-1
ii  gvfs-libs1.16.3-1
ii  libarchive13 3.1.2-7
ii  libavahi-client3 0.6.31-2
ii  libavahi-common3 0.6.31-2
ii  libavahi-glib1   0.6.31-2
ii  libbluetooth34.101-2
ii  libc62.17-7
ii  libcdio-cdda10.83-4
ii  libcdio-paranoia10.83-4
ii  libcdio130.83-4
ii  libdbus-1-3  1.6.12-1
ii  libdbus-glib-1-2 0.100.2-1
ii  libexpat12.1.0-4
ii  libgcrypt11  1.5.2-3
ii  libglib2.0-0 2.36.3-3
ii  libgoa-1.0-0 3.8.2-1
ii  libgphoto2-2 2.4.14-2.1
ii  libgphoto2-port0 2.4.14-2.1
ii  libgtk-3-0   3.8.2-3
ii  libgudev-1.0-0   175-7.2
ii  libimobiledevice21.1.1-4
ii  libmtp9  1.1.6-2
ii  libplist11.8-1
ii  libsmbclient 2:3.6.16-2
ii  libsoup-gnome2.4-1   2.42.2-6
ii  libsoup2.4-1 2.42.2-6
ii  libxml2  2.9.1+dfsg1-2
ii  psmisc   22.20-1

Versions of packages gvfs-backends recommends:
ii  gnome-keyring  3.8.2-2

Versions of packages gvfs-backends suggests:
pn  obex-data-server  
ii  samba-common  2:3.6.16-2

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org