Debian Bug report logs - #168840
w3m: Error message for invalid certificate files is too cryptic

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Simon Richter <sjr@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: w3m: Cannot connect to SSL sites: missing asn1 eos

Date: Tue, 12 Nov 2002 15:18:24 +0100

Package: w3m
Version: 0.3.2-1
Severity: normal

Hi,

whenever I try to connect to an SSL site, I get the following errors:

SSL error: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:missing asn1 eos

This may or may not be followed by the question whether I want to
connect regardless of a missing peer certificate. If I'm asked and reply
with "y", then I get an empty page, otherwise the page fails to load
entirely.

This happens with all SSL sites, and with the i386 and i486 versions of
libssl.

   Simon

-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux phobos 2.4.19 #1 Mit Okt 30 13:10:27 CET 2002 i486
Locale: LANG=de_DE@euro, LC_CTYPE=de_DE@euro

Versions of packages w3m depends on:
ii  libc6                  2.3.1-3           GNU C Library: Shared libraries an
ii  libgc6                 1:6.0+6.1alpha4-3 Conservative garbage collector for
ii  libgpmg1               1.19.6-12         General Purpose Mouse Library [lib
ii  libncurses5            5.2.20020112a-8   Shared libraries for terminal hand
ii  libssl0.9.6            0.9.6g-10         SSL shared libraries
ii  zlib1g                 1:1.1.4-6         compression library - runtime

-- no debconf information

Message #10 received at 168840@bugs.debian.org (full text, mbox, reply):

From: Fumitoshi UKAI <ukai@debian.or.jp>

To: Simon Richter <sjr@debian.org>

Cc: 168840@bugs.debian.org

Subject: Re: Bug#168840: w3m: Cannot connect to SSL sites: missing asn1 eos

Date: Wed, 13 Nov 2002 12:06:21 +0900

At Tue, 12 Nov 2002 15:18:24 +0100,
Simon Richter wrote:

> whenever I try to connect to an SSL site, I get the following errors:
> 
> SSL error: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:missing asn1 eos
> 
> This may or may not be followed by the question whether I want to
> connect regardless of a missing peer certificate. If I'm asked and reply
> with "y", then I get an empty page, otherwise the page fails to load
> entirely.

Which site are you trying to connect to?
Do you have SSL certificate installed and w3m configured to use the 
certificate files properly?

> This happens with all SSL sites, and with the i386 and i486 versions of
> libssl.

Anyway, I think this is a bug of libssl, not w3m.

Regards,
Fumitoshi UKAI

Message #15 received at 168840-quiet@bugs.debian.org (full text, mbox, reply):

From: Simon Richter <sjr@debian.org>

To: Fumitoshi UKAI <ukai@debian.or.jp>

Cc: 168840-quiet@bugs.debian.org

Subject: Re: Bug#168840: w3m: Cannot connect to SSL sites: missing asn1 eos

Date: Wed, 13 Nov 2002 08:01:25 +0100

[Message part 1 (text/plain, inline)]

Hi,

On Wed, Nov 13, 2002 at 12:06:21PM +0900, Fumitoshi UKAI wrote:
> > SSL error: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:missing asn1 eos

> Which site are you trying to connect to?

The last I tried was savannah.gnu.org.

> Do you have SSL certificate installed and w3m configured to use the 
> certificate files properly?

I have the ca-certificates package installed and w3m set to look for CA
certificates in /etc/ssl/certs. I don't use a client certificate, as I
don't need it. 

> > This happens with all SSL sites, and with the i386 and i486 versions of
> > libssl.

> Anyway, I think this is a bug of libssl, not w3m.

Hrm, I'm not so sure. I've found out that if you try repeatedly, w3m
hangs, and when sent SIGINT, crashes with a SIGSEGV, where the stack
trace looks like this:

#0  0x0000aae9 in ?? ()
#1  0x08056e56 in strcpy()
#2  0x400cab0a in Gpm_Wgetch() from /usr/lib/libgpm.so.1
#3  0x0807fec9 in wgetch()
#4  0x0804d2bf in strcpy()
#5  0x0804b4b4 in strcpy()
#6  0x402079d3 in __libc_start_main() from /lib/libc.so.6

The trace looks somewhat bogus to me (a lot of symbols are missing, so
these are actually the next public entry points), but #0 is quite
interesting (eax == eip at the point of the crash). The next frame above
contains a "call *%eax", where eax is taken from some structure the
function found a pointer to on the stack. The call is just between two
invokations of signal, where the SIGINT handler is changed just for this
call. I believe that shulg be enough to find the spot where the error is
happening, if not I can compile a debug version.

   Simon

-- 
GPG Fingerprint: 040E B5F7 84F1 4FBC CEAD  ADC6 18A0 CC8D 5706 A4B4

[Message part 2 (application/pgp-signature, inline)]

Message #22 received at 168840-quiet@bugs.debian.org (full text, mbox, reply):

From: Simon Richter <sjr@debian.org>

To: Fumitoshi UKAI <ukai@debian.or.jp>

Cc: 168840-quiet@bugs.debian.org

Subject: Re: Bug#168840: w3m: Cannot connect to SSL sites: missing asn1 eos

Date: Thu, 14 Nov 2002 22:36:49 +0100

[Message part 1 (text/plain, inline)]

Hi,

On Thu, Nov 14, 2002 at 11:19:39AM +0900, Fumitoshi UKAI wrote:
> > I have the ca-certificates package installed and w3m set to look for CA
> > certificates in /etc/ssl/certs. I don't use a client certificate, as I
> > don't need it. 

> How do you configure w3m?

Via the 'o' key. Is there another way, besides editing the config file?

   Simon

-- 
GPG Fingerprint: 040E B5F7 84F1 4FBC CEAD  ADC6 18A0 CC8D 5706 A4B4

[Message part 2 (application/pgp-signature, inline)]

Send a report that this bug log contains spam.