[Bug 899464] Re: openssl failed when interacting with sslv2 server
[Expired for openssl (Ubuntu) because there has been no activity for 60 days.] ** Changed in: openssl (Ubuntu) Status: Incomplete = Expired -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/899464 Title: openssl failed when interacting with sslv2 server To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/899464/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 899464] Re: openssl failed when interacting with sslv2 server
Thank you for taking the time to report this bug and helping to make Ubuntu better. Please execute the following command, as it will automatically gather debugging information, in a terminal: apport-collect 899464 When reporting bugs in the future please use apport by using 'ubuntu- bug' and the name of the package affected. You can learn more about this functionality at https://wiki.ubuntu.com/ReportingBugs. ** Changed in: openssl (Ubuntu) Status: Confirmed = Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/899464 Title: openssl failed when interacting with sslv2 server To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/899464/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 899464] Re: openssl failed when interacting with sslv2 server
seems like an upstream issue, verified that the site also fails from openssl on CentOS 6 $ openssl s_client -host aquarius.neweb.com.tw -port 443 CONNECTED(0003) 139957001901896:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:184: --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 0 bytes and written 113 bytes --- New, (NONE), Cipher is (NONE) Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE --- -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/899464 Title: openssl failed when interacting with sslv2 server To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/899464/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 899464] Re: openssl failed when interacting with sslv2 server
** Changed in: openssl (Ubuntu) Status: New = Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/899464 Title: openssl failed when interacting with sslv2 server To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/899464/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 899464] Re: openssl failed when interacting with sslv2 server
Finjon, if you can confirm that the server only supports SSLv2, then this is not a bug, as SSLv2 is disabled by default. However if its just a broken SSLv3.. that might be something else. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/899464 Title: openssl failed when interacting with sslv2 server To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/899464/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 899464] Re: openssl failed when interacting with sslv2 server
I haven't gotten response from that site. But if it's disabled by default, how to open it? The option '-ssl2' had been removed from the program in the latest version. The following results were fetched from 0.9.8g-4ubuntu3.13 @ Ubuntu 8.04.4 LTS: :~$ openssl s_client -ssl3 -host aquarius.neweb.com.tw -port 443 CONNECTED(0003) 15872:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:s3_pkt.c:530: :~$ openssl s_client -ssl2 -host aquarius.neweb.com.tw -port 443 CONNECTED(0003) depth=0 /C=TW/postalCode=11510/ST=Taiwan/L=Taipei/streetAddress=7F., No.52, Sec. 3, Nangang Rd., Nangang Dist., Taipei City 11510, Taiwan (R.O.C.)/O=Neweb Technologies Co., Ltd./OU=MIS/OU=Provided by Global Digital Inc./OU=GlobalTrustSSLWildcard/CN=*.neweb.com.tw verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 /C=TW/postalCode=11510/ST=Taiwan/L=Taipei/streetAddress=7F., No.52, Sec. 3, Nangang Rd., Nangang Dist., Taipei City 11510, Taiwan (R.O.C.)/O=Neweb Technologies Co., Ltd./OU=MIS/OU=Provided by Global Digital Inc./OU=GlobalTrustSSLWildcard/CN=*.neweb.com.tw verify error:num=27:certificate not trusted verify return:1 depth=0 /C=TW/postalCode=11510/ST=Taiwan/L=Taipei/streetAddress=7F., No.52, Sec. 3, Nangang Rd., Nangang Dist., Taipei City 11510, Taiwan (R.O.C.)/O=Neweb Technologies Co., Ltd./OU=MIS/OU=Provided by Global Digital Inc./OU=GlobalTrustSSLWildcard/CN=*.neweb.com.tw verify error:num=21:unable to verify the first certificate verify return:1 subject=/C=TW/postalCode=11510/ST=Taiwan/L=Taipei/streetAddress=7F., No.52, Sec. 3, Nangang Rd., Nangang Dist., Taipei City 11510, Taiwan (R.O.C.)/O=Neweb Technologies Co., Ltd./OU=MIS/OU=Provided by Global Digital Inc./OU=GlobalTrustSSLWildcard/CN=*.neweb.com.tw issuer=/C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=http://www.usertrust.com/CN=UTN-USERFirst-Hardware --- No client certificate CA names sent --- Ciphers common between both SSL endpoints: DES-CBC3-MD5 --- SSL handshake has read 1720 bytes and written 364 bytes --- New, SSLv2, Cipher is DES-CBC3-MD5 Server public key is 2048 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE SSL-Session: Protocol : SSLv2 Cipher: DES-CBC3-MD5 Session-ID: 5DCC0C925C974EDD756D1C76 Session-ID-ctx: Master-Key: 139E982728ACA06528E2A5C276029BA0E5E25BD6F3E85B84 Key-Arg : C4A1588E79FC18C8 Start Time: 1323136366 Timeout : 300 (sec) Verify return code: 21 (unable to verify the first certificate) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/899464 Title: openssl failed when interacting with sslv2 server To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/899464/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 899464] Re: openssl failed when interacting with sslv2 server
I got a response from them. They said their website sure support SSLv3. I have no idea how to identify the version SSL. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/899464 Title: openssl failed when interacting with sslv2 server To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/899464/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
