Mailing List Archive

Issue 1308 in cherokee: Multiple SSL Failure - Win7 IE8, Chrome, OpenSSL s_client
Status: New
Owner: ----

New issue 1308 by p...@noc4.net: Multiple SSL Failure - Win7 IE8, Chrome,
OpenSSL s_client
http://code.google.com/p/cherokee/issues/detail?id=1308

What steps will reproduce the problem?
1. Using IE8 or Chrome 16.0.912.41 on Win7 x64 or Chrome 16.0.912.21 on
Linux x64
2. attempt to connect to https://static.cdn.noc4.net/

What is the expected output?
A Cherokee directory listing

What do you see instead?
the ssl connection fails

IE8 says "unable display page"
Chrome says "Error 107 (net::ERR_SSL_PROTOCOL_ERROR): SSL protocol error"

What version of the product are you using? On what operating system?
Cherokee 1.2.101, Linux 64bit (Gentoo, source build), OpenSSL 1.0.0e

Please provide any additional information below.
additionally Chrome 16.0.912.21 sort of works on Linux but the connection
stalls for approx 1.5 seconds

on linux --disable-ssl-false-start goes some way to helping the 1.5 seconds
delay issue however after several requests stalls of ~16seconds occur


OpenSSL s_client also fails:

openssl s_client -connect static.cdn.noc4.net:443 -state -debug
CONNECTED(00000003)
SSL_connect:before/connect initialization
write to 0x7f5f746e79f0 [0x7f5f746e7a70] (211 bytes => 211 (0xD3))
0000 - 16 03 01 00 ce 01 00 00-ca 03 01 4e d4 12 7e fb ...........N..~.
0010 - 73 6d bf 05 bc 51 61 72-65 7e e7 58 69 b7 96 da sm...Qare~.Xi...
0020 - 89 84 f3 f2 5e c4 86 2c-39 3c 02 00 00 5c c0 14 ....^..,9<...\..
0030 - c0 0a 00 39 00 38 00 88-00 87 c0 0f c0 05 00 35 ...9.8.........5
0040 - 00 84 c0 12 c0 08 00 16-00 13 c0 0d c0 03 00 0a ................
0050 - c0 13 c0 09 00 33 00 32-00 9a 00 99 00 45 00 44 .....3.2.....E.D
0060 - c0 0e c0 04 00 2f 00 96-00 41 00 07 c0 11 c0 07 ...../...A......
0070 - c0 0c c0 02 00 05 00 04-00 15 00 12 00 09 00 14 ................
0080 - 00 11 00 08 00 06 00 03-00 ff 02 01 00 00 44 00 ..............D.
0090 - 0b 00 04 03 00 01 02 00-0a 00 34 00 32 00 01 00 ..........4.2...
00a0 - 02 00 03 00 04 00 05 00-06 00 07 00 08 00 09 00 ................
00b0 - 0a 00 0b 00 0c 00 0d 00-0e 00 0f 00 10 00 11 00 ................
00c0 - 12 00 13 00 14 00 15 00-16 00 17 00 18 00 19 00 ................
00d0 - 23 #
00d3 - <SPACES/NULS>
SSL_connect:SSLv2/v3 write client hello A
read from 0x7f5f746e79f0 [0x7f5f746ecfd0] (7 bytes => 0 (0x0))
140047928030920:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake
failure:s23_lib.c:177:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 211 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE


_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev
Re: Issue 1308 in cherokee: Multiple SSL Failure - Win7 IE8, Chrome, OpenSSL s_client [ In reply to ]
Comment #1 on issue 1308 by p...@noc4.net: Multiple SSL Failure - Win7 IE8,
Chrome, OpenSSL s_client
http://code.google.com/p/cherokee/issues/detail?id=1308

it seems that when IPv6 is enabled with listening addresses that it causes
the above issue for IPv6 AND IPv6 connections, removing IPv6 listen
addresses works around the problem, although we now have no IPv6 support :)

it seems that when IPv6 support is ticked that plain http is served up on
port 443 for both v4/v6



_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev
Re: Issue 1308 in cherokee: Multiple SSL Failure - Win7 IE8, Chrome, OpenSSL s_client [ In reply to ]
Comment #2 on issue 1308 by p...@noc4.net: Multiple SSL Failure - Win7 IE8,
Chrome, OpenSSL s_client
http://code.google.com/p/cherokee/issues/detail?id=1308

also see Issue 1309

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev
Re: Issue 1308 in cherokee: Multiple SSL Failure - Win7 IE8, Chrome, OpenSSL s_client [ In reply to ]
Updates:
Status: Duplicate
Mergedinto: 1309

Comment #3 on issue 1308 by ste...@konink.de: Multiple SSL Failure - Win7
IE8, Chrome, OpenSSL s_client
http://code.google.com/p/cherokee/issues/detail?id=1308

Merged by request.

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev