[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-05-03 Thread Dave Vree
Upon closer examination of the change log of libssl, the update we all received fixed a different issue and was not intended to fix this issue. The issue that was fixed is here: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/986147 -- You received this bug notification because you are a

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-05-02 Thread Dave Vree
Updated my 12.04 system this morning that included a new libssl. Unfortunately, the update did not fix this problem, at least not for evernote: openssl s_client -connect www.evernote.com:443 still fails. -- You received this bug notification because you are a member of Ubuntu Bugs, which is

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-05-02 Thread Félim Whiteley
I've also just updated to try query a box using python urllib and same error. urlopen error [Errno 8] _ssl.c:504: EOF occurred in violation of protocol -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-05-01 Thread Dave Vree
Looks like this bug could be the cause of Evernote failing to connect: openssl s_client -connect www.evernote.com:443 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/965371 Title: HTTPS requests

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-04-30 Thread Bug Watch Updater
** Changed in: openssl (Debian) Status: New = Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/965371 Title: HTTPS requests fail on some sites on Ubuntu 12.04 To manage

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-04-29 Thread Christoph_vW
the fixes from openssl 1.0.1b should go into 12.04 - it looks like otherwise TLS 1.1 will not work... -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/965371 Title: HTTPS requests fail on some sites

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-04-27 Thread nuk
I agree with Paulo Almeida. This shouldn't be at the final release. I'm having to use the workround of changing the httplib.py but it's not very safe to do so. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

Re: [Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-04-27 Thread Pablo Almeida
Well, it IS on the final release. 12.04 is out and there's no rolling back versions now. So now we have to hope for a (quick) fix. 2012/4/27 nuk nuk.anim...@gmail.com I agree with Paulo Almeida. This shouldn't be at the final release. I'm having to use the workround of changing the httplib.py

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-04-27 Thread Andy Igoshin
precise current gnutls-cli -p 443 info.vsu.ru is working ok. openssl s_client -connect info.vsu.ru:443 -CApath /etc/ssl/certs CONNECTED(0003) 140277691872928:error:14092073:SSL routines:SSL3_GET_SERVER_HELLO:bad packet length:s3_clnt.c:1062: -- You received this bug notification because

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-04-20 Thread André Lopes
Yesterday, the same happened on Emesene https://github.com/emesene/emesene/issues/1184: [02:02:16 ERROR e3.common.Collections] [Errno socket error] [Errno 8] ssl.c:504: EOF occurred in violation of protocol Traceback (most recent call last): File

Re: [Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-04-20 Thread Pablo Almeida
I don't know who decides this kind of thing but I believe that, if a definitive fix doesn't get done, this version of the package should not go into the final version of Ubuntu, as it will break too many things that simply work on Oneiric. Or, if released, it should force all connections to be

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-04-19 Thread Kees Cook
Confirmed that paypal works as expected for me again via multiple methods. Thanks! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/965371 Title: HTTPS requests fail on some sites on Ubuntu 12.04 To

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-04-19 Thread Sander Smeenk
I tried the 1.0.1-4ubuntu2 release which seems to work as expected! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/965371 Title: HTTPS requests fail on some sites on Ubuntu 12.04 To manage

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-04-19 Thread Maarten Kossen
Works for php fsockopen :) Thanks! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/965371 Title: HTTPS requests fail on some sites on Ubuntu 12.04 To manage notifications about this bug go to:

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-04-19 Thread Paul Graydon
That worked for my peculiar case too. Mahalo! As Pablo commented, still seems to fail on mediafire.com but I'm not certain mediafire's end point is working correctly as it fails in both openssl (1.0.1-4ubuntu3) AND gnutls (3.0.11+really2.12.14-5ubuntu3) : $ openssl s_client -connect

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-04-18 Thread Colin Watson
I've applied some more upstream fixes in openssl 1.0.1-4ubuntu2 in precise-proposed. Could people affected by this bug please report whether it makes things worse, improves them, or leaves them the same, and for which sites? If I hear positive reports and don't hear of regressions then it may be

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-04-18 Thread Saivann Carignan
I've just tested 1.0.1-4ubuntu2 against Enom API server and paypal using fsockopen / PHP and it just... worked flawlessly! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/965371 Title: HTTPS requests

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-04-18 Thread Pablo Almeida
openssl s_client -connect cs3-api.salesforce.com:443 now works but openssl s_client -connect www.mediafire.com:443 still doesn't. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/965371 Title: HTTPS

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-04-02 Thread Christoph_vW
Isn't there a better solutution than disabling TLS 1.2 completely in openssl? I need TLS 1.1 and 1.2 to monitor my servers with icinga... Better force the admins of the broken servers to fix their stuff... -- You received this bug notification because you are a member of Ubuntu Bugs, which is

Re: [Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-04-02 Thread Colin Watson
I'm awaiting advice from upstream on something better. See the upstream bug linked from this one. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/965371 Title: HTTPS requests fail on some sites on

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-04-02 Thread sseitz
Regarding #12 I'ld also suggest, to wait for an upstream solution. The side-effects of non-working SSL are far too big to be ignored or being addressed to the other end of the SSL connection. One can't argue to a customer running webshops, that paypal has an invalid implementation of TLS. --

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-04-02 Thread Saivann Carignan
Enom API servers are also affected, even with the partial fix (1.0.1-2ubuntu4). PHP continues to throws : fsockopen(): SSL: crypto enabling timeout -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/965371

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-03-30 Thread Colin Watson
** Bug watch added: OpenSSL RT #2771 http://rt.openssl.org/Ticket/Display.html?id=2771 ** Also affects: openssl via http://rt.openssl.org/Ticket/Display.html?id=2771 Importance: Unknown Status: Unknown ** Changed in: openssl (Ubuntu Precise) Milestone: None = ubuntu-12.04 --

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-03-30 Thread Bug Watch Updater
** Changed in: openssl Status: Unknown = Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/965371 Title: HTTPS requests fail on some sites on Ubuntu 12.04 To manage notifications

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-03-30 Thread blueshirt3k
Until this bug is fixed I thought this hack might be helpful for affected Python users. Not sure what problems this creates but this allowed my scripts to work again. Might be good until a proper fix is implemented. I changed /usr/lib/python2.6/httplib.py as follows: 1116c1116

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-03-30 Thread Colin Watson
I've uploaded upstream's suggested workaround for most of the problems here. It isn't complete, and in particular it doesn't deal with the server in the bug description (see the Debian bug for a categorisation of the problems here), which is why I've left this bug open at a lowered importance.

Re: [Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-03-30 Thread Pablo Almeida
Hey! After the update that introduced the workaround, my python program (which uses mediafire) works again, even though the openssl command doesn't yet. 2012/3/30 Colin Watson cjwat...@canonical.com I've uploaded upstream's suggested workaround for most of the problems here. It isn't

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-03-29 Thread Colin Watson
** Bug watch added: Debian Bug tracker #665452 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665452 ** Also affects: openssl (Debian) via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665452 Importance: Unknown Status: Unknown -- You received this bug notification because

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-03-29 Thread Bug Watch Updater
** Changed in: openssl (Debian) Status: Unknown = New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/965371 Title: HTTPS requests fail on some sites on Ubuntu 12.04 To manage notifications

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-03-29 Thread Brian Murray
Lamont says in a duplicate And it works on precise with 1.0.0g- 1ubuntu1. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/965371 Title: HTTPS requests fail on some sites on Ubuntu 12.04 To manage

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-03-28 Thread Kees Cook
For anyone using LWP::Protocol::https based Perl tools, TLSv1 can be forced with: my $thing = whatever-new( ssl_opts = { SSL_version = 'TLSv1' }, ); Another site that fails is paypal: $ openssl s_client -connect www.paypal.com:443 CONNECTED(0003) write:errno=104 vs

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-03-28 Thread Kees Cook
Other work-arounds: wget --secure-protocol=TLSv1 ... curl --tlsv1 ... -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/965371 Title: HTTPS requests fail on some sites on Ubuntu 12.04 To manage

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-03-28 Thread Steve Langasek
This may be the intended behavior, but we should determine for sure. ** Changed in: openssl (Ubuntu Precise) Importance: Undecided = High ** Changed in: openssl (Ubuntu Precise) Assignee: (unassigned) = Colin Watson (cjwatson) ** Tags added: rls-p-tracking -- You received this bug

Re: [Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-03-28 Thread Pablo Almeida
If this is the intended behaviour, it sure will break a lot of programs. Anyone knows if there's a way to force Python's urllib2.urlopen().read() to use TLS1? 2012/3/29 Steve Langasek steve.langa...@canonical.com This may be the intended behavior, but we should determine for sure. **

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-03-27 Thread Yann Klis
Same problem with graph.facebook.com... -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/965371 Title: HTTPS requests fail on some sites on Ubuntu 12.04 To manage notifications about this bug go to:

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-03-26 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: openssl (Ubuntu) Status: New = Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/965371 Title:

[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-03-26 Thread Eadz
same openssl s_client -connect cs3-api.salesforce.com:443 # Fails write:errno=104 --- no peer certificate available openssl s_client -tls1 -connect cs3-api.salesforce.com:443 # Succeeds -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to