Re: [Zotonic-Dev] Zotonic 0.57.0 - ssl Inssuficient Security - no_suitable_cipher error

[Alvaro Pagliari]

Thanks Marc,

I appreciate all the help! :D

--
Álvaro Gianni Pagliari
alvaropag [at] gmail [dot] com


Em ter., 19 de mai. de 2020 às 03:52, 'Marc Worrell' via Zotonic developers
 escreveu:

> Great!
>
> Will release the 0.57.1 today, was waiting on your test result.
>
> We have a rule that we follow the last 3 OTP releases.
>
> That is, there is some work to do for OTP-23, especially in some
> dependencies.
>
> For the 0.x we are supporting 19+ due to production servers.
> For the 1.x series (aka master) we are supporting 20+, and might change
> that to 21+.
>
> At the moment I am not too concerned about the deprecation warnings.
> We can fix those in due time.
>
> Happy that you got everything up & running,
>
> Cheers, Marc
>
>
>
> On 19 May 2020, at 02:54, Alvaro Pagliari  wrote:
>
> Hello Marc,
>
> Yep, now it works!!
>
> Maybe my* git pull --all* didn't work last time and I haven't noticed.
>
> I do remember that erlware_commons was not downloading this version
> a8b46e077034938fd82f57876103270311e6835b because I tried to change it but
> with no luck.
>
> My rebar version is the same as yours.
>
> There are some compilation warnings, how is the policy for *erlang
> version x zotonic version*?
>
> Cheers,
>
> --
> Álvaro Gianni Pagliari
> alvaropag [at] gmail [dot] com
>
>
> Em seg., 18 de mai. de 2020 às 12:20, 'Marc Worrell' via Zotonic
> developers  escreveu:
>
>> Hi Alvaro,
>>
>> That is strange.
>>
>> I also did a clean build on OTP-22 without problems.
>> And our Travis-CI build on 22 also works.
>>
>> I am also using OTP 22.3
>> (Quite recent build)
>>
>> Which version of erlware_commons do you end up with?
>>
>> I am at a8b46e077034938fd82f57876103270311e6835b
>>
>> Maybe your rebar needs updating?
>>
>> I have:
>>
>> zotonic-0.x marc$ ./rebar --version
>> rebar 2.6.4 17 20160831_145136 git 2.6.4-dirty
>>
>>
>> Cheers,
>>
>> Marc
>>
>>
>>
>>
>> On 17 May 2020, at 20:52, Alvaro Pagliari  wrote:
>>
>> Hello Marc,
>>
>> Unfortunately it didn't work, I follow these steps on zotonic directory:
>>
>> git pull --all
>> git checkout 0.x
>> make clean
>> cd deps
>> rm -rf */
>> cd ..
>> make
>>
>> The following error was shown
>>
>> ==> erlware_commons (compile)
>> /home/alvaro/devel/zotonic_leal/deps/erlware_commons/src/ec_plists.erl:834:
>> erlang:get_stacktrace/0: deprecated; use the new try/catch syntax for
>> retrieving the stack backtrace
>> /home/alvaro/devel/zotonic_leal/deps/erlware_commons/src/ec_plists.erl:836:
>> erlang:get_stacktrace/0: deprecated; use the new try/catch syntax for
>> retrieving the stack backtrace
>> Compiling
>> /home/alvaro/devel/zotonic_leal/deps/erlware_commons/src/ec_plists.erl
>> failed:
>> ERROR: compile failed while processing
>> /home/alvaro/devel/zotonic_leal/deps/erlware_commons: rebar_abort
>> make: *** [GNUmakefile:56: compile] Error 1
>>
>> I'm trying with erlang 22.3 built through kerl.
>>
>> Cheers,
>>
>> --
>> Álvaro Gianni Pagliari
>> alvaropag [at] gmail [dot] com
>>
>>
>> Em sex., 15 de mai. de 2020 às 12:39, 'Marc Worrell' via Zotonic
>> developers  escreveu:
>>
>>> Hi Alvaro,
>>>
>>> Could you try again with the now updated 0.x?
>>>
>>> I was able to reproduce the issue and updated our mochiweb branch.
>>>
>>> We still have a funky crash of lager at the start, but ignore that for
>>> now.
>>>
>>> Cheers, Marc
>>>
>>>
>>> On 12 May 2020, at 20:47, Alvaro Pagliari  wrote:
>>>
>>> Hello Marc,
>>>
>>> Sorry, I wasn't clear, this error is from my *local development machine*,
>>> I'm using:
>>> Kubuntu 20.04
>>> OpenSSL 1.1.1f   31 Mar 2020
>>> Chrome 81.0.4044.138
>>> Erlang 22.3
>>> Zotonic 0.57.0
>>>
>>> Is there a place within Zotonic or Erlang to enable these ciphers? I saw
>>> in the Zotonic documentation for version 1.0 that it's possible to
>>> implement a function to add SSL options
>>> ,
>>> but I don't know if it's supported on 0.x and if it's the correct way to
>>> handle this.
>>>
>>> I sending as an attachment the versions and cipher suites of both erlang
>>> 20.3 (the one I'm using with zotonic 0.56.0) and 22.3.
>>>
>>> I appreciate it if you can give a look at it (no hurry, hehe).
>>>
>>> Cheers!
>>>
>>> --
>>> Álvaro Gianni Pagliari
>>> alvaropag [at] gmail [dot] com
>>>
>>>
>>> Em ter., 12 de mai. de 2020 às 15:13, 'Marc Worrell' via Zotonic
>>> developers  escreveu:
>>>
 A quick search gave me this:

 https://bugs.erlang.org/plugins/servlet/mobile#issue/ERL-826

 Is your server up to date with the ciphers?

 Tomorrow I can check my local install against OTP-22.

 Cheers, Marc



 Sent from my iPhone

 On 12 May 2020, at 19:35, Alvaro Pagliari  wrote:

 
 Hello,

 I just updated my local zotonic installation to 0.57.0 with erlang
 22.3. It starts normally, but when I try to access one of the sites this
 error pops up:

Re: [Zotonic-Dev] Zotonic 0.57.0 - ssl Inssuficient Security - no_suitable_cipher error

['Marc Worrell' via Zotonic developers]

Great!

Will release the 0.57.1 today, was waiting on your test result.

We have a rule that we follow the last 3 OTP releases.

That is, there is some work to do for OTP-23, especially in some dependencies.

For the 0.x we are supporting 19+ due to production servers.
For the 1.x series (aka master) we are supporting 20+, and might change that to 
21+.

At the moment I am not too concerned about the deprecation warnings.
We can fix those in due time.

Happy that you got everything up & running,

Cheers, Marc



> On 19 May 2020, at 02:54, Alvaro Pagliari  wrote:
> 
> Hello Marc,
> 
> Yep, now it works!! 
> 
> Maybe my git pull --all didn't work last time and I haven't noticed.
> 
> I do remember that erlware_commons was not downloading this version 
> a8b46e077034938fd82f57876103270311e6835b because I tried to change it but 
> with no luck.
> 
> My rebar version is the same as yours.
> 
> There are some compilation warnings, how is the policy for erlang version x 
> zotonic version? 
> 
> Cheers,
>  
> --
> Álvaro Gianni Pagliari
> alvaropag [at] gmail [dot] com
> 
> 
> Em seg., 18 de mai. de 2020 às 12:20, 'Marc Worrell' via Zotonic developers 
>  > escreveu:
> Hi Alvaro,
> 
> That is strange.
> 
> I also did a clean build on OTP-22 without problems.
> And our Travis-CI build on 22 also works.
> 
> I am also using OTP 22.3
> (Quite recent build)
> 
> Which version of erlware_commons do you end up with?
> 
> I am at a8b46e077034938fd82f57876103270311e6835b
> 
> Maybe your rebar needs updating?
> 
> I have:
> 
>> zotonic-0.x marc$ ./rebar --version
>> rebar 2.6.4 17 20160831_145136 git 2.6.4-dirty
> 
> Cheers,
> 
> Marc
> 
> 
> 
> 
>> On 17 May 2020, at 20:52, Alvaro Pagliari > > wrote:
>> 
>> Hello Marc,
>> 
>> Unfortunately it didn't work, I follow these steps on zotonic directory:
>> 
>> git pull --all
>> git checkout 0.x
>> make clean
>> cd deps
>> rm -rf */
>> cd ..
>> make
>> 
>> The following error was shown
>> 
>> ==> erlware_commons (compile)
>> /home/alvaro/devel/zotonic_leal/deps/erlware_commons/src/ec_plists.erl:834: 
>> erlang:get_stacktrace/0: deprecated; use the new try/catch syntax for 
>> retrieving the stack backtrace
>> /home/alvaro/devel/zotonic_leal/deps/erlware_commons/src/ec_plists.erl:836: 
>> erlang:get_stacktrace/0: deprecated; use the new try/catch syntax for 
>> retrieving the stack backtrace
>> Compiling 
>> /home/alvaro/devel/zotonic_leal/deps/erlware_commons/src/ec_plists.erl 
>> failed:
>> ERROR: compile failed while processing 
>> /home/alvaro/devel/zotonic_leal/deps/erlware_commons: rebar_abort
>> make: *** [GNUmakefile:56: compile] Error 1
>> 
>> I'm trying with erlang 22.3 built through kerl.
>> 
>> Cheers,
>> 
>> --
>> Álvaro Gianni Pagliari
>> alvaropag [at] gmail [dot] com
>> 
>> 
>> Em sex., 15 de mai. de 2020 às 12:39, 'Marc Worrell' via Zotonic developers 
>> > > escreveu:
>> Hi Alvaro,
>> 
>> Could you try again with the now updated 0.x?
>> 
>> I was able to reproduce the issue and updated our mochiweb branch.
>> 
>> We still have a funky crash of lager at the start, but ignore that for now.
>> 
>> Cheers, Marc
>> 
>> 
>>> On 12 May 2020, at 20:47, Alvaro Pagliari >> > wrote:
>>> 
>>> Hello Marc,
>>> 
>>> Sorry, I wasn't clear, this error is from my local development machine, I'm 
>>> using:
>>> Kubuntu 20.04
>>> OpenSSL 1.1.1f   31 Mar 2020
>>> Chrome 81.0.4044.138
>>> Erlang 22.3
>>> Zotonic 0.57.0
>>> 
>>> Is there a place within Zotonic or Erlang to enable these ciphers? I saw in 
>>> the Zotonic documentation for version 1.0 that it's possible to implement a 
>>> function to add SSL options 
>>> ,
>>>  but I don't know if it's supported on 0.x and if it's the correct way to 
>>> handle this.
>>> 
>>> I sending as an attachment the versions and cipher suites of both erlang 
>>> 20.3 (the one I'm using with zotonic 0.56.0) and 22.3.
>>> 
>>> I appreciate it if you can give a look at it (no hurry, hehe).
>>> 
>>> Cheers!
>>> 
>>> --
>>> Álvaro Gianni Pagliari
>>> alvaropag [at] gmail [dot] com
>>> 
>>> 
>>> Em ter., 12 de mai. de 2020 às 15:13, 'Marc Worrell' via Zotonic developers 
>>> >> > escreveu:
>>> A quick search gave me this:
>>> 
>>> https://bugs.erlang.org/plugins/servlet/mobile#issue/ERL-826 
>>> 
>>> 
>>> Is your server up to date with the ciphers?
>>> 
>>> Tomorrow I can check my local install against OTP-22.
>>> 
>>> Cheers, Marc
>>> 
>>> 
>>> 
>>> Sent from my iPhone
>>> 
 On 12 May 2020, at 19:35, Alvaro Pagliari >>> > wrote:
 
 
 Hello,
 
 I just updated my local zotonic installation to 0.57.0 with erlang 22.3. 
 It 

Re: [Zotonic-Dev] Zotonic 0.57.0 - ssl Inssuficient Security - no_suitable_cipher error

[Alvaro Pagliari]

Hello Marc,

Yep, now it works!!

Maybe my* git pull --all* didn't work last time and I haven't noticed.

I do remember that erlware_commons was not downloading this version
a8b46e077034938fd82f57876103270311e6835b because I tried to change it but
with no luck.

My rebar version is the same as yours.

There are some compilation warnings, how is the policy for *erlang version
x zotonic version*?

Cheers,

--
Álvaro Gianni Pagliari
alvaropag [at] gmail [dot] com


Em seg., 18 de mai. de 2020 às 12:20, 'Marc Worrell' via Zotonic developers
 escreveu:

> Hi Alvaro,
>
> That is strange.
>
> I also did a clean build on OTP-22 without problems.
> And our Travis-CI build on 22 also works.
>
> I am also using OTP 22.3
> (Quite recent build)
>
> Which version of erlware_commons do you end up with?
>
> I am at a8b46e077034938fd82f57876103270311e6835b
>
> Maybe your rebar needs updating?
>
> I have:
>
> zotonic-0.x marc$ ./rebar --version
> rebar 2.6.4 17 20160831_145136 git 2.6.4-dirty
>
>
> Cheers,
>
> Marc
>
>
>
>
> On 17 May 2020, at 20:52, Alvaro Pagliari  wrote:
>
> Hello Marc,
>
> Unfortunately it didn't work, I follow these steps on zotonic directory:
>
> git pull --all
> git checkout 0.x
> make clean
> cd deps
> rm -rf */
> cd ..
> make
>
> The following error was shown
>
> ==> erlware_commons (compile)
> /home/alvaro/devel/zotonic_leal/deps/erlware_commons/src/ec_plists.erl:834:
> erlang:get_stacktrace/0: deprecated; use the new try/catch syntax for
> retrieving the stack backtrace
> /home/alvaro/devel/zotonic_leal/deps/erlware_commons/src/ec_plists.erl:836:
> erlang:get_stacktrace/0: deprecated; use the new try/catch syntax for
> retrieving the stack backtrace
> Compiling
> /home/alvaro/devel/zotonic_leal/deps/erlware_commons/src/ec_plists.erl
> failed:
> ERROR: compile failed while processing
> /home/alvaro/devel/zotonic_leal/deps/erlware_commons: rebar_abort
> make: *** [GNUmakefile:56: compile] Error 1
>
> I'm trying with erlang 22.3 built through kerl.
>
> Cheers,
>
> --
> Álvaro Gianni Pagliari
> alvaropag [at] gmail [dot] com
>
>
> Em sex., 15 de mai. de 2020 às 12:39, 'Marc Worrell' via Zotonic
> developers  escreveu:
>
>> Hi Alvaro,
>>
>> Could you try again with the now updated 0.x?
>>
>> I was able to reproduce the issue and updated our mochiweb branch.
>>
>> We still have a funky crash of lager at the start, but ignore that for
>> now.
>>
>> Cheers, Marc
>>
>>
>> On 12 May 2020, at 20:47, Alvaro Pagliari  wrote:
>>
>> Hello Marc,
>>
>> Sorry, I wasn't clear, this error is from my *local development machine*,
>> I'm using:
>> Kubuntu 20.04
>> OpenSSL 1.1.1f   31 Mar 2020
>> Chrome 81.0.4044.138
>> Erlang 22.3
>> Zotonic 0.57.0
>>
>> Is there a place within Zotonic or Erlang to enable these ciphers? I saw
>> in the Zotonic documentation for version 1.0 that it's possible to
>> implement a function to add SSL options
>> ,
>> but I don't know if it's supported on 0.x and if it's the correct way to
>> handle this.
>>
>> I sending as an attachment the versions and cipher suites of both erlang
>> 20.3 (the one I'm using with zotonic 0.56.0) and 22.3.
>>
>> I appreciate it if you can give a look at it (no hurry, hehe).
>>
>> Cheers!
>>
>> --
>> Álvaro Gianni Pagliari
>> alvaropag [at] gmail [dot] com
>>
>>
>> Em ter., 12 de mai. de 2020 às 15:13, 'Marc Worrell' via Zotonic
>> developers  escreveu:
>>
>>> A quick search gave me this:
>>>
>>> https://bugs.erlang.org/plugins/servlet/mobile#issue/ERL-826
>>>
>>> Is your server up to date with the ciphers?
>>>
>>> Tomorrow I can check my local install against OTP-22.
>>>
>>> Cheers, Marc
>>>
>>>
>>>
>>> Sent from my iPhone
>>>
>>> On 12 May 2020, at 19:35, Alvaro Pagliari  wrote:
>>>
>>> 
>>> Hello,
>>>
>>> I just updated my local zotonic installation to 0.57.0 with erlang 22.3.
>>> It starts normally, but when I try to access one of the sites this error
>>> pops up:
>>>
>>>
>>> *TLS server: In state start at tls_handshake_1_3.erl:1932 generated
>>> SERVER ALERT: Fatal - Insufficient Security - no_suitable_cipher*
>>>
>>> I removed my certs and let zotonic recreate them, also tried to remove
>>> and create a new dh-params.pem but with no luck.
>>>
>>> Do I need to enable a new module? Maybe some configuration changed?
>>>
>>> Any help is appreciated, thanks!
>>>
>>> --
>>> Álvaro Pagliari
>>>
>>> --
>>>
>>> ---
>>> You received this message because you are subscribed to the Google
>>> Groups "Zotonic developers" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to zotonic-developers+unsubscr...@googlegroups.com.
>>> To view this discussion on the web visit
>>> https://groups.google.com/d/msgid/zotonic-developers/6e086be6-7392-4c53-b473-47a2734f6d1e%40googlegroups.com
>>> 

Re: [Zotonic-Dev] Zotonic 0.57.0 - ssl Inssuficient Security - no_suitable_cipher error

['Marc Worrell' via Zotonic developers]

Hi Alvaro,

That is strange.

I also did a clean build on OTP-22 without problems.
And our Travis-CI build on 22 also works.

I am also using OTP 22.3
(Quite recent build)

Which version of erlware_commons do you end up with?

I am at a8b46e077034938fd82f57876103270311e6835b

Maybe your rebar needs updating?

I have:

> zotonic-0.x marc$ ./rebar --version
> rebar 2.6.4 17 20160831_145136 git 2.6.4-dirty

Cheers,

Marc




> On 17 May 2020, at 20:52, Alvaro Pagliari  wrote:
> 
> Hello Marc,
> 
> Unfortunately it didn't work, I follow these steps on zotonic directory:
> 
> git pull --all
> git checkout 0.x
> make clean
> cd deps
> rm -rf */
> cd ..
> make
> 
> The following error was shown
> 
> ==> erlware_commons (compile)
> /home/alvaro/devel/zotonic_leal/deps/erlware_commons/src/ec_plists.erl:834: 
> erlang:get_stacktrace/0: deprecated; use the new try/catch syntax for 
> retrieving the stack backtrace
> /home/alvaro/devel/zotonic_leal/deps/erlware_commons/src/ec_plists.erl:836: 
> erlang:get_stacktrace/0: deprecated; use the new try/catch syntax for 
> retrieving the stack backtrace
> Compiling 
> /home/alvaro/devel/zotonic_leal/deps/erlware_commons/src/ec_plists.erl failed:
> ERROR: compile failed while processing 
> /home/alvaro/devel/zotonic_leal/deps/erlware_commons: rebar_abort
> make: *** [GNUmakefile:56: compile] Error 1
> 
> I'm trying with erlang 22.3 built through kerl.
> 
> Cheers,
> 
> --
> Álvaro Gianni Pagliari
> alvaropag [at] gmail [dot] com
> 
> 
> Em sex., 15 de mai. de 2020 às 12:39, 'Marc Worrell' via Zotonic developers 
>  > escreveu:
> Hi Alvaro,
> 
> Could you try again with the now updated 0.x?
> 
> I was able to reproduce the issue and updated our mochiweb branch.
> 
> We still have a funky crash of lager at the start, but ignore that for now.
> 
> Cheers, Marc
> 
> 
>> On 12 May 2020, at 20:47, Alvaro Pagliari > > wrote:
>> 
>> Hello Marc,
>> 
>> Sorry, I wasn't clear, this error is from my local development machine, I'm 
>> using:
>> Kubuntu 20.04
>> OpenSSL 1.1.1f   31 Mar 2020
>> Chrome 81.0.4044.138
>> Erlang 22.3
>> Zotonic 0.57.0
>> 
>> Is there a place within Zotonic or Erlang to enable these ciphers? I saw in 
>> the Zotonic documentation for version 1.0 that it's possible to implement a 
>> function to add SSL options 
>> ,
>>  but I don't know if it's supported on 0.x and if it's the correct way to 
>> handle this.
>> 
>> I sending as an attachment the versions and cipher suites of both erlang 
>> 20.3 (the one I'm using with zotonic 0.56.0) and 22.3.
>> 
>> I appreciate it if you can give a look at it (no hurry, hehe).
>> 
>> Cheers!
>> 
>> --
>> Álvaro Gianni Pagliari
>> alvaropag [at] gmail [dot] com
>> 
>> 
>> Em ter., 12 de mai. de 2020 às 15:13, 'Marc Worrell' via Zotonic developers 
>> > > escreveu:
>> A quick search gave me this:
>> 
>> https://bugs.erlang.org/plugins/servlet/mobile#issue/ERL-826 
>> 
>> 
>> Is your server up to date with the ciphers?
>> 
>> Tomorrow I can check my local install against OTP-22.
>> 
>> Cheers, Marc
>> 
>> 
>> 
>> Sent from my iPhone
>> 
>>> On 12 May 2020, at 19:35, Alvaro Pagliari >> > wrote:
>>> 
>>> 
>>> Hello,
>>> 
>>> I just updated my local zotonic installation to 0.57.0 with erlang 22.3. It 
>>> starts normally, but when I try to access one of the sites this error pops 
>>> up:
>>> 
>>> TLS server: In state start at tls_handshake_1_3.erl:1932 generated SERVER 
>>> ALERT: Fatal - Insufficient Security 
>>> - no_suitable_cipher
>>> 
>>> I removed my certs and let zotonic recreate them, also tried to remove and 
>>> create a new dh-params.pem but with no luck.
>>> 
>>> Do I need to enable a new module? Maybe some configuration changed?
>>> 
>>> Any help is appreciated, thanks!
>>> 
>>> --
>>> Álvaro Pagliari
>>> 
>>> -- 
>>> 
>>> --- 
>>> You received this message because you are subscribed to the Google Groups 
>>> "Zotonic developers" group.
>>> To unsubscribe from this group and stop receiving emails from it, send an 
>>> email to zotonic-developers+unsubscr...@googlegroups.com 
>>> .
>>> To view this discussion on the web visit 
>>> https://groups.google.com/d/msgid/zotonic-developers/6e086be6-7392-4c53-b473-47a2734f6d1e%40googlegroups.com
>>>  
>>> .
>> 
>> 
>> -- 
>> 
>> --- 
>> You received this message because you are subscribed to the Google Groups 
>> "Zotonic developers" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to 

Re: [Zotonic-Dev] Zotonic 0.57.0 - ssl Inssuficient Security - no_suitable_cipher error

[Alvaro Pagliari]

Hello Marc,

Unfortunately it didn't work, I follow these steps on zotonic directory:

git pull --all
git checkout 0.x
make clean
cd deps
rm -rf */
cd ..
make

The following error was shown

==> erlware_commons (compile)
/home/alvaro/devel/zotonic_leal/deps/erlware_commons/src/ec_plists.erl:834:
erlang:get_stacktrace/0: deprecated; use the new try/catch syntax for
retrieving the stack backtrace
/home/alvaro/devel/zotonic_leal/deps/erlware_commons/src/ec_plists.erl:836:
erlang:get_stacktrace/0: deprecated; use the new try/catch syntax for
retrieving the stack backtrace
Compiling
/home/alvaro/devel/zotonic_leal/deps/erlware_commons/src/ec_plists.erl
failed:
ERROR: compile failed while processing
/home/alvaro/devel/zotonic_leal/deps/erlware_commons: rebar_abort
make: *** [GNUmakefile:56: compile] Error 1

I'm trying with erlang 22.3 built through kerl.

Cheers,

--
Álvaro Gianni Pagliari
alvaropag [at] gmail [dot] com


Em sex., 15 de mai. de 2020 às 12:39, 'Marc Worrell' via Zotonic developers
 escreveu:

> Hi Alvaro,
>
> Could you try again with the now updated 0.x?
>
> I was able to reproduce the issue and updated our mochiweb branch.
>
> We still have a funky crash of lager at the start, but ignore that for now.
>
> Cheers, Marc
>
>
> On 12 May 2020, at 20:47, Alvaro Pagliari  wrote:
>
> Hello Marc,
>
> Sorry, I wasn't clear, this error is from my *local development machine*,
> I'm using:
> Kubuntu 20.04
> OpenSSL 1.1.1f   31 Mar 2020
> Chrome 81.0.4044.138
> Erlang 22.3
> Zotonic 0.57.0
>
> Is there a place within Zotonic or Erlang to enable these ciphers? I saw
> in the Zotonic documentation for version 1.0 that it's possible to
> implement a function to add SSL options
> ,
> but I don't know if it's supported on 0.x and if it's the correct way to
> handle this.
>
> I sending as an attachment the versions and cipher suites of both erlang
> 20.3 (the one I'm using with zotonic 0.56.0) and 22.3.
>
> I appreciate it if you can give a look at it (no hurry, hehe).
>
> Cheers!
>
> --
> Álvaro Gianni Pagliari
> alvaropag [at] gmail [dot] com
>
>
> Em ter., 12 de mai. de 2020 às 15:13, 'Marc Worrell' via Zotonic
> developers  escreveu:
>
>> A quick search gave me this:
>>
>> https://bugs.erlang.org/plugins/servlet/mobile#issue/ERL-826
>>
>> Is your server up to date with the ciphers?
>>
>> Tomorrow I can check my local install against OTP-22.
>>
>> Cheers, Marc
>>
>>
>>
>> Sent from my iPhone
>>
>> On 12 May 2020, at 19:35, Alvaro Pagliari  wrote:
>>
>> 
>> Hello,
>>
>> I just updated my local zotonic installation to 0.57.0 with erlang 22.3.
>> It starts normally, but when I try to access one of the sites this error
>> pops up:
>>
>>
>> *TLS server: In state start at tls_handshake_1_3.erl:1932 generated
>> SERVER ALERT: Fatal - Insufficient Security - no_suitable_cipher*
>>
>> I removed my certs and let zotonic recreate them, also tried to remove
>> and create a new dh-params.pem but with no luck.
>>
>> Do I need to enable a new module? Maybe some configuration changed?
>>
>> Any help is appreciated, thanks!
>>
>> --
>> Álvaro Pagliari
>>
>> --
>>
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "Zotonic developers" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to zotonic-developers+unsubscr...@googlegroups.com.
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/zotonic-developers/6e086be6-7392-4c53-b473-47a2734f6d1e%40googlegroups.com
>> 
>> .
>>
>>
>> --
>>
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "Zotonic developers" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to zotonic-developers+unsubscr...@googlegroups.com.
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/zotonic-developers/8FAC43F8-CDC1-4002-B9D9-A1AE8E93A0A6%40mac.com
>> 
>> .
>>
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "Zotonic developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to zotonic-developers+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/zotonic-developers/CAOuQNV1VRBrbo-UxDonPv1TO2cuj3iitCpjjmLFsj3KV8K7SLg%40mail.gmail.com
> 
> .
> 
>
>
> --
>
> ---
> You received this message because you are 

Re: [Zotonic-Dev] Zotonic 0.57.0 - ssl Inssuficient Security - no_suitable_cipher error

['Marc Worrell' via Zotonic developers]

Hi Alvaro,

Could you try again with the now updated 0.x?

I was able to reproduce the issue and updated our mochiweb branch.

We still have a funky crash of lager at the start, but ignore that for now.

Cheers, Marc


> On 12 May 2020, at 20:47, Alvaro Pagliari  wrote:
> 
> Hello Marc,
> 
> Sorry, I wasn't clear, this error is from my local development machine, I'm 
> using:
> Kubuntu 20.04
> OpenSSL 1.1.1f   31 Mar 2020
> Chrome 81.0.4044.138
> Erlang 22.3
> Zotonic 0.57.0
> 
> Is there a place within Zotonic or Erlang to enable these ciphers? I saw in 
> the Zotonic documentation for version 1.0 that it's possible to implement a 
> function to add SSL options 
> ,
>  but I don't know if it's supported on 0.x and if it's the correct way to 
> handle this.
> 
> I sending as an attachment the versions and cipher suites of both erlang 20.3 
> (the one I'm using with zotonic 0.56.0) and 22.3.
> 
> I appreciate it if you can give a look at it (no hurry, hehe).
> 
> Cheers!
> 
> --
> Álvaro Gianni Pagliari
> alvaropag [at] gmail [dot] com
> 
> 
> Em ter., 12 de mai. de 2020 às 15:13, 'Marc Worrell' via Zotonic developers 
>  > escreveu:
> A quick search gave me this:
> 
> https://bugs.erlang.org/plugins/servlet/mobile#issue/ERL-826 
> 
> 
> Is your server up to date with the ciphers?
> 
> Tomorrow I can check my local install against OTP-22.
> 
> Cheers, Marc
> 
> 
> 
> Sent from my iPhone
> 
>> On 12 May 2020, at 19:35, Alvaro Pagliari > > wrote:
>> 
>> 
>> Hello,
>> 
>> I just updated my local zotonic installation to 0.57.0 with erlang 22.3. It 
>> starts normally, but when I try to access one of the sites this error pops 
>> up:
>> 
>> TLS server: In state start at tls_handshake_1_3.erl:1932 generated SERVER 
>> ALERT: Fatal - Insufficient Security 
>> - no_suitable_cipher
>> 
>> I removed my certs and let zotonic recreate them, also tried to remove and 
>> create a new dh-params.pem but with no luck.
>> 
>> Do I need to enable a new module? Maybe some configuration changed?
>> 
>> Any help is appreciated, thanks!
>> 
>> --
>> Álvaro Pagliari
>> 
>> -- 
>> 
>> --- 
>> You received this message because you are subscribed to the Google Groups 
>> "Zotonic developers" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to zotonic-developers+unsubscr...@googlegroups.com 
>> .
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/zotonic-developers/6e086be6-7392-4c53-b473-47a2734f6d1e%40googlegroups.com
>>  
>> .
> 
> 
> -- 
> 
> --- 
> You received this message because you are subscribed to the Google Groups 
> "Zotonic developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to zotonic-developers+unsubscr...@googlegroups.com 
> .
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/zotonic-developers/8FAC43F8-CDC1-4002-B9D9-A1AE8E93A0A6%40mac.com
>  
> .
> 
> -- 
> 
> --- 
> You received this message because you are subscribed to the Google Groups 
> "Zotonic developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to zotonic-developers+unsubscr...@googlegroups.com 
> .
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/zotonic-developers/CAOuQNV1VRBrbo-UxDonPv1TO2cuj3iitCpjjmLFsj3KV8K7SLg%40mail.gmail.com
>  
> .
> 

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"Zotonic developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to zotonic-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/zotonic-developers/F846BA95-FE71-4762-8535-5A30A3E211FD%40me.com.

Re: [Zotonic-Dev] Zotonic 0.57.0 - ssl Inssuficient Security - no_suitable_cipher error

[Alvaro Pagliari]

Hello Marc,

Sorry, I wasn't clear, this error is from my *local development machine*,
I'm using:
Kubuntu 20.04
OpenSSL 1.1.1f   31 Mar 2020
Chrome 81.0.4044.138
Erlang 22.3
Zotonic 0.57.0

Is there a place within Zotonic or Erlang to enable these ciphers? I saw in
the Zotonic documentation for version 1.0 that it's possible to implement a
function to add SSL options
,
but I don't know if it's supported on 0.x and if it's the correct way to
handle this.

I sending as an attachment the versions and cipher suites of both erlang
20.3 (the one I'm using with zotonic 0.56.0) and 22.3.

I appreciate it if you can give a look at it (no hurry, hehe).

Cheers!

--
Álvaro Gianni Pagliari
alvaropag [at] gmail [dot] com


Em ter., 12 de mai. de 2020 às 15:13, 'Marc Worrell' via Zotonic developers
 escreveu:

> A quick search gave me this:
>
> https://bugs.erlang.org/plugins/servlet/mobile#issue/ERL-826
>
> Is your server up to date with the ciphers?
>
> Tomorrow I can check my local install against OTP-22.
>
> Cheers, Marc
>
>
>
> Sent from my iPhone
>
> On 12 May 2020, at 19:35, Alvaro Pagliari  wrote:
>
> 
> Hello,
>
> I just updated my local zotonic installation to 0.57.0 with erlang 22.3.
> It starts normally, but when I try to access one of the sites this error
> pops up:
>
>
> *TLS server: In state start at tls_handshake_1_3.erl:1932 generated SERVER
> ALERT: Fatal - Insufficient Security - no_suitable_cipher*
>
> I removed my certs and let zotonic recreate them, also tried to remove and
> create a new dh-params.pem but with no luck.
>
> Do I need to enable a new module? Maybe some configuration changed?
>
> Any help is appreciated, thanks!
>
> --
> Álvaro Pagliari
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "Zotonic developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to zotonic-developers+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/zotonic-developers/6e086be6-7392-4c53-b473-47a2734f6d1e%40googlegroups.com
> 
> .
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "Zotonic developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to zotonic-developers+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/zotonic-developers/8FAC43F8-CDC1-4002-B9D9-A1AE8E93A0A6%40mac.com
> 
> .
>

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"Zotonic developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to zotonic-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/zotonic-developers/CAOuQNV1VRBrbo-UxDonPv1TO2cuj3iitCpjjmLFsj3KV8K7SLg%40mail.gmail.com.
erlang 20.3
> ssl:versions().  
[{ssl_app,"8.2.4"},
 {supported,['tlsv1.2','tlsv1.1',tlsv1]},
 {available,['tlsv1.2','tlsv1.1',tlsv1,sslv3]}]

> io:format("~p~n", [ssl:cipher_suites()]).
[{ecdhe_ecdsa,aes_256_cbc,sha384,sha384},
 {ecdhe_rsa,aes_256_cbc,sha384,sha384},
 {ecdh_ecdsa,aes_256_cbc,sha384,sha384},
 {ecdh_rsa,aes_256_cbc,sha384,sha384},
 {dhe_rsa,aes_256_cbc,sha256},
 {dhe_dss,aes_256_cbc,sha256},
 {rsa,aes_256_cbc,sha256},
 {ecdhe_ecdsa,aes_128_cbc,sha256,sha256},
 {ecdhe_rsa,aes_128_cbc,sha256,sha256},
 {ecdh_ecdsa,aes_128_cbc,sha256,sha256},
 {ecdh_rsa,aes_128_cbc,sha256,sha256},
 {dhe_rsa,aes_128_cbc,sha256},
 {dhe_dss,aes_128_cbc,sha256},
 {rsa,aes_128_cbc,sha256},
 {ecdhe_ecdsa,aes_256_cbc,sha},
 {ecdhe_rsa,aes_256_cbc,sha},
 {dhe_rsa,aes_256_cbc,sha},
 {dhe_dss,aes_256_cbc,sha},
 {ecdh_ecdsa,aes_256_cbc,sha},
 {ecdh_rsa,aes_256_cbc,sha},
 {rsa,aes_256_cbc,sha},
 {ecdhe_ecdsa,aes_128_cbc,sha},
 {ecdhe_rsa,aes_128_cbc,sha},
 {dhe_rsa,aes_128_cbc,sha},
 {dhe_dss,aes_128_cbc,sha},
 {ecdh_ecdsa,aes_128_cbc,sha},
 {ecdh_rsa,aes_128_cbc,sha},
 {rsa,aes_128_cbc,sha},
 {ecdhe_ecdsa,'3des_ede_cbc',sha},
 {ecdhe_rsa,'3des_ede_cbc',sha},
 {dhe_rsa,'3des_ede_cbc',sha},
 {dhe_dss,'3des_ede_cbc',sha},
 {ecdh_ecdsa,'3des_ede_cbc',sha},
 {ecdh_rsa,'3des_ede_cbc',sha},
 {rsa,'3des_ede_cbc',sha}]


 
 
erlang 22.3
> ssl:versions(). 
[{ssl_app,"9.2"},
 {supported,['tlsv1.2']},
 {supported_dtls,['dtlsv1.2']},
 {available,['tlsv1.3','tlsv1.2','tlsv1.1',tlsv1,sslv3]},
 {available_dtls,['dtlsv1.2',dtlsv1]}]

> io:format("~p~n", [ssl:cipher_suites()]).
[{ecdhe_ecdsa,aes_256_gcm,aead,sha384},
 

Re: [Zotonic-Dev] Zotonic 0.57.0 - ssl Inssuficient Security - no_suitable_cipher error

['Marc Worrell' via Zotonic developers]

A quick search gave me this:

https://bugs.erlang.org/plugins/servlet/mobile#issue/ERL-826

Is your server up to date with the ciphers?

Tomorrow I can check my local install against OTP-22.

Cheers, Marc



Sent from my iPhone

> On 12 May 2020, at 19:35, Alvaro Pagliari  wrote:
> 
> 
> Hello,
> 
> I just updated my local zotonic installation to 0.57.0 with erlang 22.3. It 
> starts normally, but when I try to access one of the sites this error pops up:
> 
> TLS server: In state start at tls_handshake_1_3.erl:1932 generated SERVER 
> ALERT: Fatal - Insufficient Security
> - no_suitable_cipher
> 
> I removed my certs and let zotonic recreate them, also tried to remove and 
> create a new dh-params.pem but with no luck.
> 
> Do I need to enable a new module? Maybe some configuration changed?
> 
> Any help is appreciated, thanks!
> 
> --
> Álvaro Pagliari
> -- 
> 
> --- 
> You received this message because you are subscribed to the Google Groups 
> "Zotonic developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to zotonic-developers+unsubscr...@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/zotonic-developers/6e086be6-7392-4c53-b473-47a2734f6d1e%40googlegroups.com.

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"Zotonic developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to zotonic-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/zotonic-developers/8FAC43F8-CDC1-4002-B9D9-A1AE8E93A0A6%40mac.com.