x/build: `git` errors with `gnutls_handshake() failed: Error in the pull function.`

[bcmills]

#!watchflakes
post <- pkg ~ `^cmd/go` && `Error in the pull function`

            > go get -d insecure.go-get-issue-15410.appspot.com/pkg/p
            [stderr]
            # cd $WORK/gopath/src/insecure.go-get-issue-15410.appspot.com; git clone -- http://insecure.go-get-issue-15410.appspot.com/ $WORK/gopath/src/insecure.go-get-issue-15410.appspot.com/pkg
            Cloning into '$WORK/gopath/src/insecure.go-get-issue-15410.appspot.com/pkg'...
            fatal: unable to access 'http://insecure.go-get-issue-15410.appspot.com/': gnutls_handshake() failed: Error in the pull function.
            package insecure.go-get-issue-15410.appspot.com/pkg/p: exit status 128

greplogs -l -e 'gnutls_handshake() failed: Error in the pull function.'`
2022-05-09T20:57:58-3f43096/linux-386-longtest
2021-12-13T16:44:13-acc65b4/linux-amd64-longtest
2021-11-08T14:49:56-ab31dbc/linux-386-longtest
2021-10-26T15:20:53-1b2362b/linux-386-longtest
2021-10-23T16:18:15-12e4404/linux-386-longtest
2021-10-20T20:39:29-1dff8f0/linux-386-longtest
2021-10-20T05:28:45-b091189/linux-386-longtest
2021-10-20T05:28:45-b091189/linux-amd64-longtest
2021-10-19T18:56:08-07e5527/linux-386-longtest
2021-10-19T18:43:08-1d63052/linux-386-longtest
2021-10-19T18:18:37-9820602/linux-386-longtest
2021-10-11T22:34:49-d90f0b9/linux-386-longtest
2021-09-08T11:57:03-9295723/linux-386-longtest
2021-04-11T15:56:20-189c694/linux-amd64-longtest
2021-04-06T21:25:55-0bc4605/linux-386-longtest
2021-04-03T21:06:18-9e7bc80/linux-386-longtest
2020-10-29T16:26:43-25d28ec/linux-386-longtest

[bcmills]

I suspect that this indicates some kind of network error or internal server error, but it would be nice to get a better error message out of it.

Some cursory searching suggests:

• Upgrade git. (linux-386-longtest currently has git version 2.30.2, whereas the current release is 2.36.1)
• Upgrade libcurl3-gnutls (linux-386-longtest has 7.74.0, current is 7.83.0)
• Upgrade libgnutls30(linux-386-longtest has 3.7.1-5, current is 3.7.4-2)

[bcmills]

greplogs -l -e 'gnutls_handshake\(\) failed: Error in the pull function\.' --since=2022-05-10
2022-06-07T18:31:49-ef2567c/linux-amd64-longtest

This one contains more logging due to the inclusion of CL 409575:

go test proxy running at GOPROXY=http://127.0.0.1:33855/mod
--- FAIL: TestScript (0.01s)
    --- FAIL: TestScript/gopath_moved_repo (1.00s)
        script_test.go:272: 
            # (2022-06-07T18:54:31Z)
            # Test that 'go get -u' reports packages whose VCS configurations do not
            # match their import paths. (0.000s)
            # We need to execute a custom Go program to break the config files.
            #
            # git will ask for a username and password when we run 'go get -d -f -u',
            # so we also need to set GIT_ASKPASS. Conveniently, a single binary can
            # perform both tasks! (0.555s)
            # Test that 'go get -u' reports moved git packages. (0.439s)
            > [exec:git] go get -d rsc.io/pdf
            [stderr]
            # cd $WORK/gopath/src/rsc.io; git clone -- https://github.com/rsc/pdf $WORK/gopath/src/rsc.io/pdf
            Cloning into '$WORK/gopath/src/rsc.io/pdf'...
            18:54:31.678227 http.c:756              == Info: Couldn't find host github.com in the .netrc file; using defaults
            18:54:31.681371 http.c:756              == Info:   Trying 140.82.114.3:443...
            18:54:31.706505 http.c:756              == Info: Connected to github.com (140.82.114.3) port 443 (#0)
            18:54:31.790700 http.c:756              == Info: found 387 certificates in /etc/ssl/certs
            18:54:31.790893 http.c:756              == Info: ALPN, offering h2
            18:54:31.790909 http.c:756              == Info: ALPN, offering http/1.1
            18:54:31.818991 http.c:756              == Info: SSL connection using TLS1.3 / ECDHE_RSA_AES_128_GCM_SHA256
            18:54:31.821982 http.c:756              == Info: 	 server certificate verification OK
            18:54:31.821996 http.c:756              == Info: 	 server certificate status verification SKIPPED
            18:54:31.822153 http.c:756              == Info: 	 common name: github.com (matched)
            18:54:31.822162 http.c:756              == Info: 	 server certificate expiration date OK
            18:54:31.822167 http.c:756              == Info: 	 server certificate activation date OK
            18:54:31.822180 http.c:756              == Info: 	 certificate public key: EC/ECDSA
            18:54:31.822185 http.c:756              == Info: 	 certificate version: #3
            18:54:31.822225 http.c:756              == Info: 	 subject: C=US,ST=California,L=San Francisco,O=GitHub\, Inc.,CN=github.com
            18:54:31.822235 http.c:756              == Info: 	 start date: Tue, 15 Mar 2022 00:00:00 GMT
            18:54:31.822242 http.c:756              == Info: 	 expire date: Wed, 15 Mar 2023 23:59:59 GMT
            18:54:31.822264 http.c:756              == Info: 	 issuer: C=US,O=DigiCert Inc,CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1
            18:54:31.822283 http.c:756              == Info: ALPN, server accepted to use h2
            18:54:31.822323 http.c:756              == Info: Using HTTP2, server supports multi-use
            18:54:31.822329 http.c:756              == Info: Connection state changed (HTTP/2 confirmed)
            18:54:31.822336 http.c:756              == Info: Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
            18:54:31.822429 http.c:756              == Info: Using Stream ID: 1 (easy handle 0x564ed7140430)
            18:54:31.822470 http.c:703              => Send header, 0000000191 bytes (0x000000bf)
            18:54:31.822479 http.c:715              => Send header: GET /rsc/pdf/info/refs?service=git-upload-pack HTTP/2
            18:54:31.822483 http.c:715              => Send header: Host: github.com
            18:54:31.822486 http.c:715              => Send header: user-agent: git/2.30.2
            18:54:31.822488 http.c:715              => Send header: accept: */*
            18:54:31.822493 http.c:715              => Send header: accept-encoding: deflate, gzip, br
            18:54:31.822496 http.c:715              => Send header: pragma: no-cache
            18:54:31.822499 http.c:715              => Send header: git-protocol: version=2
            18:54:31.822502 http.c:715              => Send header:
            18:54:31.847592 http.c:756              == Info: Connection state changed (MAX_CONCURRENT_STREAMS == 100)!
            18:54:31.870791 http.c:703              <= Recv header, 0000000013 bytes (0x0000000d)
            18:54:31.870817 http.c:715              <= Recv header: HTTP/2 200
            18:54:31.870848 http.c:703              <= Recv header, 0000000026 bytes (0x0000001a)
            18:54:31.870853 http.c:715              <= Recv header: server: GitHub Babel 2.0
            18:54:31.870859 http.c:703              <= Recv header, 0000000059 bytes (0x0000003b)
            18:54:31.870863 http.c:715              <= Recv header: content-type: application/x-git-upload-pack-advertisement
            18:54:31.870867 http.c:703              <= Recv header, 0000000054 bytes (0x00000036)
            18:54:31.870870 http.c:715              <= Recv header: content-security-policy: default-src 'none'; sandbox
            18:54:31.870874 http.c:703              <= Recv header, 0000000040 bytes (0x00000028)
            18:54:31.870880 http.c:715              <= Recv header: expires: Fri, 01 Jan 1980 00:00:00 GMT
            18:54:31.870891 http.c:703              <= Recv header, 0000000018 bytes (0x00000012)
            18:54:31.870894 http.c:715              <= Recv header: pragma: no-cache
            18:54:31.870898 http.c:703              <= Recv header, 0000000053 bytes (0x00000035)
            18:54:31.870901 http.c:715              <= Recv header: cache-control: no-cache, max-age=0, must-revalidate
            18:54:31.870905 http.c:703              <= Recv header, 0000000023 bytes (0x00000017)
            18:54:31.870909 http.c:715              <= Recv header: vary: Accept-Encoding
            18:54:31.870913 http.c:703              <= Recv header, 0000000052 bytes (0x00000034)
            18:54:31.870917 http.c:715              <= Recv header: x-github-request-id: B303:511E:EDA6:1892A:629F9EE7
            18:54:31.870921 http.c:703              <= Recv header, 0000000023 bytes (0x00000017)
            18:54:31.870924 http.c:715              <= Recv header: x-frame-options: DENY
            18:54:31.870929 http.c:703              <= Recv header, 0000000002 bytes (0x00000002)
            18:54:31.870932 http.c:715              <= Recv header:
            18:54:31.885018 http.c:756              == Info: Closing connection 0
            18:54:31.889791 http.c:756              == Info: Couldn't find host github.com in the .netrc file; using defaults
            18:54:31.889821 http.c:756              == Info: Hostname github.com was found in DNS cache
            18:54:31.889849 http.c:756              == Info:   Trying 140.82.114.3:443...
            18:54:31.915207 http.c:756              == Info: Connected to github.com (140.82.114.3) port 443 (#1)
            18:54:31.994652 http.c:756              == Info: found 387 certificates in /etc/ssl/certs
            18:54:31.994958 http.c:756              == Info: ALPN, offering h2
            18:54:31.995010 http.c:756              == Info: ALPN, offering http/1.1
            18:54:31.995038 http.c:756              == Info: SSL re-using session ID
            18:54:32.024572 http.c:756              == Info: gnutls_handshake() failed: Error in the pull function.
            18:54:32.024663 http.c:756              == Info: Closing connection 1
            error: RPC failed; curl 35 gnutls_handshake() failed: Error in the pull function.
            fatal: expected flush after ref listing
            package rsc.io/pdf: exit status 128
            [exit status 1]
            FAIL: testdata/script/gopath_moved_repo.txt:21: unexpected command failure
            
FAIL
FAIL	cmd/go	177.649s

[bcmills]

--- FAIL: TestScript (0.01s)
    --- FAIL: TestScript/mod_init_glide (0.56s)
        script_test.go:282: 
            # (2022-09-06T16:13:29Z)
            # Regression test for golang.org/issue/32161:
            # 'go mod init' did not locate tags when resolving a commit to a pseudo-version. (0.560s)
            > go mod init x
            [stderr]
            go: creating new go.mod: module x
            go: converting glide.lock: stat github.com/rsc/legacytest@fb3c628075e32f7f3c248a3abbdafd69ad6e21e1: github.com/rsc/legacytest@fb3c628075e32f7f3c248a3abbdafd69ad6e21e1: invalid version: git fetch -f origin refs/heads/*:refs/heads/* refs/tags/*:refs/tags/* in $WORK/gopath/pkg/mod/cache/vcs/02e2b870e781600b12f669a2429e9f625455accbfc13989fc24e53973cfac1fb: exit status 128:
            	16:13:30.239149 http.c:756              == Info: Couldn't find host github.com in the .netrc file; using defaults
            	16:13:30.244830 http.c:756              == Info:   Trying 140.82.114.4:443...
            	16:13:30.269528 http.c:756              == Info: Connected to github.com (140.82.114.4) port 443 (#0)
            	16:13:30.350695 http.c:756              == Info: found 387 certificates in /etc/ssl/certs
            	16:13:30.350876 http.c:756              == Info: ALPN, offering h2
            	16:13:30.350916 http.c:756              == Info: ALPN, offering http/1.1
            	16:13:30.376080 http.c:756              == Info: gnutls_handshake() failed: Error in the pull function.
            	16:13:30.376104 http.c:756              == Info: Closing connection 0
            	fatal: unable to access 'https://github.com/rsc/legacytest/': gnutls_handshake() failed: Error in the pull function.
            go: copying requirements from glide.lock
            go: to add module requirements and sums:
            	go mod tidy
            > cmpenv go.mod go.mod.out
            [diff -go.mod +go.mod.out]
             module x
             
             go 1.20
            +
            +require github.com/rsc/legacytest v1.1.0-pre.0.20180717164849-fb3c628075e3
            
            FAIL: testdata/script/mod_init_glide.txt:11: go.mod and go.mod.out differ
            
FAIL
FAIL	cmd/go	168.673s