{"action":"created","issue":{"url":"https://api.github.com/repos/tatsuhiro-t/aria2/issues/392","repository_url":"https://api.github.com/repos/tatsuhiro-t/aria2","labels_url":"https://api.github.com/repos/tatsuhiro-t/aria2/issues/392/labels{/name}","comments_url":"https://api.github.com/repos/tatsuhiro-t/aria2/issues/392/comments","events_url":"https://api.github.com/repos/tatsuhiro-t/aria2/issues/392/events","html_url":"https://github.com/tatsuhiro-t/aria2/issues/392","id":80138864,"number":392,"title":"TLS1.2 Failure - Handshake not supported","user":{"login":"pheerai","id":1502291,"avatar_url":"https://avatars.githubusercontent.com/u/1502291?v=3","gravatar_id":"","url":"https://api.github.com/users/pheerai","html_url":"https://github.com/pheerai","followers_url":"https://api.github.com/users/pheerai/followers","following_url":"https://api.github.com/users/pheerai/following{/other_user}","gists_url":"https://api.github.com/users/pheerai/gists{/gist_id}","starred_url":"https://api.github.com/users/pheerai/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pheerai/subscriptions","organizations_url":"https://api.github.com/users/pheerai/orgs","repos_url":"https://api.github.com/users/pheerai/repos","events_url":"https://api.github.com/users/pheerai/events{/privacy}","received_events_url":"https://api.github.com/users/pheerai/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":8,"created_at":"2015-05-24T11:52:39Z","updated_at":"2016-03-07T16:17:37Z","closed_at":"2015-05-24T13:20:02Z","body":"When downloading a file via HTTPS, I get the error\r\n\r\n```\r\n05/24 13:28:41 [ERROR] CUID#6 - Download aborted. URI=https://ftp.f3l.de/aurbs/x86_64/aurbs.db\r\nException: [AbstractCommand.cc:350] errorCode=1 URI=https://ftp.f3l.de/aurbs/x86_64/aurbs.db\r\n  -> [SocketCore.cc:933] errorCode=1 SSL/TLS handshake failure: The signature algorithm is not supported.\r\n```\r\n\r\nThe Host has a CACert-Certificate that is trusted globally by my PC.\r\nMy aria2c is build against libgnutls.so.30.\r\nWhen connecting directly with gnutls, I get the following error (Shortened to relevant part):\r\n\r\n```\r\n[foor@bar:~]$ gnutls-cli ftp.f3l.de\r\n[...]\r\n- Certificate type: X.509\r\n[...]\r\n- Status: The certificate is trusted. \r\n- Description: (TLS1.2)-(ECDHE-RSA-SECP256R1)-(AES-128-GCM)\r\n[...]\r\n- Ephemeral EC Diffie-Hellman parameters\r\n - Using curve: SECP256R1\r\n - Curve size: 256 bits\r\n- Version: TLS1.2\r\n- Key Exchange: ECDHE-RSA\r\n- Server Signature: RSA-SHA1\r\n- Cipher: AES-128-GCM\r\n- MAC: AEAD\r\n- Compression: NULL\r\n- Options: safe renegotiation,\r\n- Handshake was completed\r\n```\r\n\r\nSo, the handshake failure does not lie within the range of gnutls."},"comment":{"url":"https://api.github.com/repos/tatsuhiro-t/aria2/issues/comments/193323572","html_url":"https://github.com/tatsuhiro-t/aria2/issues/392#issuecomment-193323572","issue_url":"https://api.github.com/repos/tatsuhiro-t/aria2/issues/392","id":193323572,"user":{"login":"q3aql","id":11588247,"avatar_url":"https://avatars.githubusercontent.com/u/11588247?v=3","gravatar_id":"","url":"https://api.github.com/users/q3aql","html_url":"https://github.com/q3aql","followers_url":"https://api.github.com/users/q3aql/followers","following_url":"https://api.github.com/users/q3aql/following{/other_user}","gists_url":"https://api.github.com/users/q3aql/gists{/gist_id}","starred_url":"https://api.github.com/users/q3aql/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/q3aql/subscriptions","organizations_url":"https://api.github.com/users/q3aql/orgs","repos_url":"https://api.github.com/users/q3aql/repos","events_url":"https://api.github.com/users/q3aql/events{/privacy}","received_events_url":"https://api.github.com/users/q3aql/received_events","type":"User","site_admin":false},"created_at":"2016-03-07T16:17:37Z","updated_at":"2016-03-07T16:17:37Z","body":"@antbryan This is maybe a problem with certificates. You can try disable it with the following command:\r\n\r\n<code>$ aria2c --check-certificate=false https://sourceforge.net/projects/xbian/files/release/XBian_2016.03.01_rpi.img.gz/download</code>\r\n\r\nAlso, you can use my ca-certificates ([ca-certificates.crt](https://github.com/q3aql/aria2-static-builds/releases/download/v1.20.0_2/ca-certificates.crt)):\r\n\r\n<code>$ aria2c --ca-certificate=[ca-certificates.crt](https://github.com/q3aql/aria2-static-builds/releases/download/v1.20.0_2/ca-certificates.crt) https://sourceforge.net/projects/xbian/files/release/XBian_2016.03.01_rpi.img.gz/download"}}