SSL gnutls_handshake() failed: Handshake failed

[jb3]

Details

• Project URL: https://discoin.readthedocs.io/
• Build URL (if applicable): https://readthedocs.org/projects/discoin/builds/5866119/
• Read the Docs username (if applicable): josephbanks

Expected Result

Cloning repo going fine

Actual Result

Getting an error https://i.josephbanks.me/i55un.png, this is a legit certificate from Comodo, under a Cloudflare Flexible SSL plan, so it's not a problem with the cert, just wondering what's going on...

[jb3]

Forgot to say the GitLab instance is https://gitlab.josephbanks.me/

[Kobzol]

I'm having the same problem. The docs for my repo worked a week ago, but then my repo server switched to a new certificate (EV certificate from Terena) and now all RTD builds fail on git clone with the gnutls_handshake error.

[humitos]

@Kobzol could you provide more information?

The report of this issue is several months old and I can't reproduce it locally. So, probably something is fixed with the SSL certificate.

[Kobzol]

Every build of my project fails with this error:

git clone --recursive ...
cloning into '.'...
fatal: unable to access '<repo>': gnutls_handshake() failed: Handshake failed

I've tried to build several RTD projects hosted on the same repository website that worked with a different certificate just a few weeks ago and all of them fail with the same error, so I'm pretty sure it's caused by the certificate. I know that some other tools that are accessing the website of my repo are having the exact same problem with the handshake. So I guess it's either a badly configured certificate or maybe RTD uses an outdated SSL library that doesn't work with this certificate?

The certificate is on this site: https://code.it4i.cz. It uses TLS 1.2, ECDHE_RSA with P-256 and AES_256_GCM.

[humitos]

I can clone the repository without any problem in my computer, so it's definetly something on RTD. I'm not sure what, yet but I will ask to the other folks. Thanks for your report.

[davidfischer]

I checked the certificate on SSL Labs and it looks good. This issue appears to be an issue with Ubuntu 14.04 issue -- RTD's build servers are still on that -- and when they are upgraded this will resolve itself (see #3615). The same issue does not manifest on later versions.

[Kobzol]

It works after server upgrade to 16.04 (#3615) :-) Thanks!

[humitos]

@Kobzol nice! thanks for the update here. I'm closing this issue. Feel free to reopen if you consider ;)