Re: w3m SSL handling error

[B.V. Raghav]

Bob Proulx <bob@proulx.com> writes:


> Why aren't you using 1.0.2j-1?  That is a big difference!  

My my! I totally missed that. In fact I apologise for not having
bothered about it!

# apt update && apt full-upgrade

$ apt-cache policy libssl1.0.2 
libssl1.0.2:
  Installed: 1.0.2j-1
  Candidate: 1.0.2j-1
  Version table:
 *** 1.0.2j-1 500
        500 http://mirror.cse.iitk.ac.in/debian stretch/main amd64 Packages
        100 /var/lib/dpkg/status

It is not up to date. But the result is the same. Is there some cache
clear etc. required?

$ w3m https://www.emacswiki.org/
SSL error: error:0906D06C:PEM routines:PEM_read_bio:no start line

This is one more preposterous

$ gnutls-cli-debug www.emacswiki.org
GnuTLS debug client 3.5.4
Checking www.emacswiki.org:443
                             for SSL 3.0 (RFC6101) support... no
                        whether we need to disable TLS 1.2... yes
                        whether we need to disable TLS 1.1... yes
                        whether we need to disable TLS 1.0... yes
                        whether %NO_EXTENSIONS is required... yes
                               whether %COMPAT is required... yes
                             for TLS 1.0 (RFC2246) support...
Server does not support any of SSL 3.0, TLS 1.0 and TLS 1.1 and TLS 1.2 no

With other domains, I run the command
$ gnutls-cli --tofu domain.tld

and it succeeds in connecting with following Certificate[#] info:
 - subject `CN=domain.tld', issuer `C=IN,O=IIT Kanpur,OU=Computer
 Center,CN=ironport1.iitk.ac.in', serial ...

but fails to terminate `properly':

*** Fatal error: The TLS connection was non-properly terminated.
*** Server has terminated the connection abnormally.

Does this seem to have a bearing on my problem?

-- 
Raghav