[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

[Paul Graydon]

That worked for my peculiar case too.  Mahalo!

As Pablo commented, still seems to fail on mediafire.com but I'm not
certain mediafire's end point is working correctly as it fails in both
openssl (1.0.1-4ubuntu3)  AND gnutls (3.0.11+really2.12.14-5ubuntu3) :

$  openssl s_client -connect www.mediafire.com:443
CONNECTED(00000003)
140199672272544:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:177:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 174 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
---


$ gnutls-cli www.mediafire.com -p 443

Resolving 'www.mediafire.com'...
Connecting to '205.196.120.8:443'...
*** Fatal error: A TLS packet with unexpected length was received.
*** Handshake has failed
GnuTLS error: A TLS packet with unexpected length was received.


I should point out that it seems to work with the openssl 1.0.0e-2ubuntu4.2 from 11.10, but doesn't with the gnutls 2.10.5-1ubuntu3.1 from 11.10.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/965371

Title:
  HTTPS requests fail on some sites on Ubuntu 12.04

Status in OpenSSL cryptography and SSL/TLS toolkit:
  Confirmed
Status in “openssl” package in Ubuntu:
  Triaged
Status in “openssl” source package in Precise:
  Triaged
Status in “openssl” package in Debian:
  New

Bug description:
  This week, HTTPS connections from a Python script I wrote started
  giving me this error:

  urllib2.URLError: <urlopen error [Errno 8] _ssl.c:497: EOF occurred in
  violation of protocol>

  This used to work up until some three days ago and still works on
  other Ubuntu versions, but not in other Python versions on Precise. I
  was suspecting this was a bug in Python, but a guy on AskUbuntu (
  http://askubuntu.com/questions/116020/python-https-requests-urllib2
  -to-some-sites-fail-on-ubuntu-12-04-without-proxy/116059#116059 )
  found out this happens using the openssl command line tool too:

  $ openssl s_client -connect www.mediafire.com:443

  But succeeds if forcing TLS 1 with the -tls1 argument.

To manage notifications about this bug go to:
https://bugs.launchpad.net/openssl/+bug/965371/+subscriptions