touch-packages team mailing list archive
-
touch-packages team
-
Mailing list archive
-
Message #90275
[Bug 861137] Re: Openssl TLS errors while connecting to SSLv3 sites
Hi patrick,
we have exactly the same problem. Disabling SSL and everything related
to openssl just fails (and requests)
Nevertheless you told about this problem only occurring with TLS
versions other than 1.2, so I disabled all other TLS versions server
side, but the problem remains .
I checked btw your site too and this it where it becomes funny:
- curl seems to work fine
- openssl fails (same error, with OpenSSL 1.0.1f 6 Jan 2014)
- python request (2.7) fails
So any tips, especially with requests, would be greatly appreciated. I
tried building requests with custom OpenSSL version, but got no luck so
far.
@Seth Arnold:
I submitted a bug. https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1475228
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/861137
Title:
Openssl TLS errors while connecting to SSLv3 sites
Status in openssl package in Ubuntu:
Confirmed
Bug description:
I upgraded to Oneiric Ocelot beta1. OpenSSL version is "1.0.0e 6 Sep
2011"
Now, when I connect to certain HTTPs servers with wget or curl I get a
TLS error.
With wget : OpenSSL: error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error
With curl : curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error
In wget, this can be fixed by specifying --secure-protocol=sslv3 option
In curl, this can be fixed by specifying -sslv3 option
The issue is that the automatic check for the version seems to be
failing. This is working fine in Natty systems using older versions of
openssl.
The impact of this will be in scripts using curl, wget etc. which will
start failing after an upgrade.
Ubuntu version
Description: Ubuntu oneiric (development branch)
Release: 11.10
OpenSSL version : OpenSSL 1.0.0e 6 Sep 2011
openssl:
Installed: 1.0.0e-2ubuntu2
Candidate: 1.0.0e-2ubuntu2
Version table:
*** 1.0.0e-2ubuntu2 0
500 http://us.archive.ubuntu.com/ubuntu/ oneiric/main amd64 Packages
100 /var/lib/dpkg/status
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/861137/+subscriptions