Suddenly getting "GnuTLS error: An unexpected TLS handshake"

[rjwilmsi]

I've had a working wine setup on two opensuse 13.1 machines for over a year now. At some point this week I started getting the following error "GnuTLS error: An unexpected TLS handshake packet was received." when trying to access Wikipedia under HTTPS i.e. https://en.wikipedia.org/ using ie6 under wine. ie6 installed using winetricks. (My real need is not to use ie6 but this is the simplest way to demonstrate the issue). There had been no patch changes to my machines around the time things stopped working, it occurred on two machines, one of which was in a different location so different internet connection etc. Removing .wine/ and reinstalling with winetricks etc. has not fixed it, nor has a reboot. Wikipedia under HTTPS through native Linux Firefox is working fine.

On a third machine, opensuse 13.2, which did not previously have wine installed, I have installed winetricks ie6 etc. and everything works.

So somehow two of my machines are now "broken". It seems that I have some wine configuration that is now invalid, or (given that both machines stopped working at the same time), something like a previously stored HTTPS certificate has expired but is still being picked up. Other than the .wine/ directory, which I have completely removed prior to reinstalling wine, I am not aware of any other directories that would have information relating to wine/ie6.

So my question is, does anybody know what would cause this error please?

[dimesio]

I get that same error in the console when the login screen for Wizard101 loads in openSUSE 13.1, but not when I run it 12.3 (same Wine version), so I've always suspected it's a bug in the GnuTLS that is shipped with 13.1. I haven't really investigated further, but since you say you don't get it in 13.2, which has a newer version of GnuTLS, it sounds like the bug has already been fixed upstream.

[rjwilmsi]

Had it never worked on opensuse 13.1 I'd accept "upstream bug in gnutls". However as it was previously working on 13.1 and has broken without my machine having any software changes, this doesn't add up to me.

[dimesio]

I assume "without my machine having any software changes" also includes Wine. If I'm wrong about that, you need to run a regression test and file a bug.

Perhaps Wikipedia changed something at their end that now triggers the problem in GnuTLS in Wine, but doesn't affect native browsers. (I haven't had any problems with native browsers, either.) You could file a bug for that, though it may end up being marked upstream.

[dimesio]

One other thing: using native IE is not supported due to the many native dlls it requires, so if you want to file a bug here, you need to reproduce this in an app that does not require any overrides.

[rjwilmsi]

OK, have managed to resolve this one.

Information for others: resolution on opensuse 13.1 (64 bit, 32 bit WINEARCH) was to install libgnutls28 and libgnutls28-32bit packages from opensuse 13.2 update repo (so version 3.2.18-4.1), replacing the version 3.2.4 packages from opensuse 13.1 oss or 13.1 update repos. I am still unclear why things suddenly broke on a working setup, I can only assume that wikipedia made a tweak to their HTTPS settings and this required a gnuTLS update for compatibility.