Debian Bug report logs - #471896
openssl: connection to talk.google.com:443 with -no_ssl2 fails

version graph

Package: openssl; Maintainer for openssl is Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>; Source for openssl is src:openssl.

Reported by: "Valery V. Vorotyntsev" <valery.vv@gmail.com>

Date: Thu, 20 Mar 2008 22:39:01 UTC

Severity: normal

Found in version openssl/0.9.8g-7

Done: Kurt Roeckx <kurt@roeckx.be>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Rob Browning <rlb@defaultvalue.org>:
Bug#471896; Package emacs22-el. Full text and rfc822 format available.

Acknowledgement sent to "Valery V. Vorotyntsev" <valery.vv@gmail.com>:
New Bug report received and forwarded. Copy sent to Rob Browning <rlb@defaultvalue.org>. Full text and rfc822 format available.

Message #5 received at submit@bugs.debian.org (full text, mbox):

From: "Valery V. Vorotyntsev" <valery.vv@gmail.com>
To: "Debian Bug Tracking System" <submit@bugs.debian.org>
Subject: emacs22-el: tls.el cannot connect with openssl
Date: Fri, 21 Mar 2008 00:34:11 +0200
Package: emacs22-el
Version: 22.1+1-2.3
Severity: normal

`open-tls-stream' cannot establish connection unless `gnutls-bin'
package is installed.

My jabber.el stopped working today. I've narrowed the problem to
`open-tls-stream' function unable to connect with
"openssl s_client -connect %h:%p -no_ssl2" command.

Feel free to contact me for any additional details.

--
With best regards,
vvv

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.22-3-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages emacs22-el depends on:
ii  emacs22-common                22.1+1-2.3 The GNU Emacs editor's shared, arc

emacs22-el recommends no packages.

-- no debconf information




Information forwarded to debian-bugs-dist@lists.debian.org, Rob Browning <rlb@defaultvalue.org>:
Bug#471896; Package emacs22-el. Full text and rfc822 format available.

Acknowledgement sent to Sven Joachim <svenjoac@gmx.de>:
Extra info received and forwarded to list. Copy sent to Rob Browning <rlb@defaultvalue.org>. Full text and rfc822 format available.

Message #10 received at 471896@bugs.debian.org (full text, mbox):

From: Sven Joachim <svenjoac@gmx.de>
To: "Valery V. Vorotyntsev" <valery.vv@gmail.com>
Cc: 471896@bugs.debian.org
Subject: Re: Bug#471896: emacs22-el: tls.el cannot connect with openssl
Date: Fri, 21 Mar 2008 09:08:35 +0100
On 2008-03-20 23:34 +0100, Valery V. Vorotyntsev wrote:

> `open-tls-stream' cannot establish connection unless `gnutls-bin'
> package is installed.
>
> My jabber.el stopped working today. I've narrowed the problem to
> `open-tls-stream' function unable to connect with
> "openssl s_client -connect %h:%p -no_ssl2" command.

Did you upgrade openssl before that?  A new version went into testing
the day before yesterday┬╣.

Sven


┬╣ http://packages.qa.debian.org/o/openssl/news/20080319T223927Z.html






Information forwarded to debian-bugs-dist@lists.debian.org, Rob Browning <rlb@defaultvalue.org>:
Bug#471896; Package emacs22-el. Full text and rfc822 format available.

Acknowledgement sent to "Valery V. Vorotyntsev" <valery.vv@gmail.com>:
Extra info received and forwarded to list. Copy sent to Rob Browning <rlb@defaultvalue.org>. Full text and rfc822 format available.

Message #15 received at 471896@bugs.debian.org (full text, mbox):

From: "Valery V. Vorotyntsev" <valery.vv@gmail.com>
To: "Sven Joachim" <svenjoac@gmx.de>
Cc: 471896@bugs.debian.org
Subject: Re: Bug#471896: emacs22-el: tls.el cannot connect with openssl
Date: Fri, 21 Mar 2008 10:40:22 +0200
Hi, Sven,

On 3/21/08, Sven Joachim <svenjoac@gmx.de> wrote:
> On 2008-03-20 23:34 +0100, Valery V. Vorotyntsev wrote:
>
>  > `open-tls-stream' cannot establish connection unless `gnutls-bin'
>  > package is installed.
>  >
>  > My jabber.el stopped working today. I've narrowed the problem to
>  > `open-tls-stream' function unable to connect with
>  > "openssl s_client -connect %h:%p -no_ssl2" command.
>
>  Did you upgrade openssl before that?  A new version went into testing
>  the day before yesterday┬╣.

Yes, I did.

  $ grep openssl /var/log/dpkg.log | tail -1
  2008-03-19 14:34:13 status installed openssl 0.9.8g-7

Connection establishes when `s_client' is used without `-no_ssl2' option.
(You can test it against talk.google.com:443.)

Thus, my workaround is
  (setq tls-program '("openssl s_client -connect %h:%p"))

...I wonder what is causing the problem: recent openssl change or
talk.google.com server update of some kind.

-- 
vvv

Information forwarded to debian-bugs-dist@lists.debian.org, Rob Browning <rlb@defaultvalue.org>:
Bug#471896; Package emacs22-el. Full text and rfc822 format available.

Acknowledgement sent to Sven Joachim <svenjoac@gmx.de>:
Extra info received and forwarded to list. Copy sent to Rob Browning <rlb@defaultvalue.org>. Full text and rfc822 format available.

Message #20 received at 471896@bugs.debian.org (full text, mbox):

From: Sven Joachim <svenjoac@gmx.de>
To: "Valery V. Vorotyntsev" <valery.vv@gmail.com>
Cc: 471896@bugs.debian.org
Subject: Re: Bug#471896: emacs22-el: tls.el cannot connect with openssl
Date: Fri, 21 Mar 2008 10:31:56 +0100
On 2008-03-21 09:40 +0100, Valery V. Vorotyntsev wrote:

> Connection establishes when `s_client' is used without `-no_ssl2' option.
> (You can test it against talk.google.com:443.)

I can confirm that; also that it fails with the -no_ssl2 option.

> Thus, my workaround is
>   (setq tls-program '("openssl s_client -connect %h:%p"))
>
> ...I wonder what is causing the problem: recent openssl change or
> talk.google.com server update of some kind.

You could try to downgrade openssl and maybe libssl0.9.8, if you'd like
to find out.

Sven




Information forwarded to debian-bugs-dist@lists.debian.org, Rob Browning <rlb@defaultvalue.org>:
Bug#471896; Package emacs22-el. Full text and rfc822 format available.

Acknowledgement sent to "Valery V. Vorotyntsev" <valery.vv@gmail.com>:
Extra info received and forwarded to list. Copy sent to Rob Browning <rlb@defaultvalue.org>. Full text and rfc822 format available.

Message #25 received at 471896@bugs.debian.org (full text, mbox):

From: "Valery V. Vorotyntsev" <valery.vv@gmail.com>
To: "Sven Joachim" <svenjoac@gmx.de>
Cc: 471896@bugs.debian.org
Subject: Re: Bug#471896: emacs22-el: tls.el cannot connect with openssl
Date: Fri, 21 Mar 2008 11:50:45 +0200
On 3/21/08, Sven Joachim <svenjoac@gmx.de> wrote:
> On 2008-03-21 09:40 +0100, Valery V. Vorotyntsev wrote:
>
>  > ...I wonder what is causing the problem: recent openssl change or
>  > talk.google.com server update of some kind.
>
> You could try to downgrade openssl and maybe libssl0.9.8, if you'd like
>  to find out.

Right. I've downgraded to `libssl0.9.8_0.9.8g-4' and `openssl_0.9.8g-4'.
`-no_ssl2' works with them.

-- 
vvv




Bug reassigned from package `emacs22-el' to `openssl'. Request was from Sven Joachim <svenjoac@gmx.de> to control@bugs.debian.org. (Fri, 21 Mar 2008 15:03:02 GMT) Full text and rfc822 format available.

Information forwarded to debian-bugs-dist@lists.debian.org, Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>:
Bug#471896; Package openssl. Full text and rfc822 format available.

Acknowledgement sent to Sven Joachim <svenjoac@gmx.de>:
Extra info received and forwarded to list. Copy sent to Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>. Full text and rfc822 format available.

Message #32 received at 471896@bugs.debian.org (full text, mbox):

From: Sven Joachim <svenjoac@gmx.de>
To: "Valery V. Vorotyntsev" <valery.vv@gmail.com>
Cc: 471896@bugs.debian.org
Subject: Re: Bug#471896: emacs22-el: tls.el cannot connect with openssl
Date: Fri, 21 Mar 2008 15:42:53 +0100
On 2008-03-21 10:50 +0100, Valery V. Vorotyntsev wrote:

> On 3/21/08, Sven Joachim <svenjoac@gmx.de> wrote:
>> You could try to downgrade openssl and maybe libssl0.9.8, if you'd like
>>  to find out.
>
> Right. I've downgraded to `libssl0.9.8_0.9.8g-4' and `openssl_0.9.8g-4'.
> `-no_ssl2' works with them.

Okay, I'll reassign this bug to openssl then.  BTW, connection to other
servers seems to work with -no_ssl2, I tested a few HTTPS sites.

Thanks,
       Sven




Information forwarded to debian-bugs-dist@lists.debian.org, Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>:
Bug#471896; Package openssl. Full text and rfc822 format available.

Acknowledgement sent to "Valery V. Vorotyntsev" <valery.vv@gmail.com>:
Extra info received and forwarded to list. Copy sent to Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>. Full text and rfc822 format available.

Message #37 received at 471896@bugs.debian.org (full text, mbox):

From: "Valery V. Vorotyntsev" <valery.vv@gmail.com>
To: "Sven Joachim" <svenjoac@gmx.de>
Cc: 471896@bugs.debian.org
Subject: Re: Bug#471896: emacs22-el: tls.el cannot connect with openssl
Date: Fri, 21 Mar 2008 16:44:46 +0200
On 3/21/08, Sven Joachim <svenjoac@gmx.de> wrote:
> Okay, I'll reassign this bug to openssl then.  BTW, connection to other
>  servers seems to work with -no_ssl2, I tested a few HTTPS sites.

Nice. Thanks a lot, Sven!




Changed Bug title to `openssl: connection to talk.google.com:443 with -no_ssl2 fails' from `emacs22-el: tls.el cannot connect with openssl'. Request was from Sven Joachim <svenjoac@gmx.de> to control@bugs.debian.org. (Fri, 21 Mar 2008 15:42:06 GMT) Full text and rfc822 format available.

Information forwarded to debian-bugs-dist@lists.debian.org, Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>:
Bug#471896; Package openssl. Full text and rfc822 format available.

Acknowledgement sent to Kurt Roeckx <kurt@roeckx.be>:
Extra info received and forwarded to list. Copy sent to Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>. Full text and rfc822 format available.

Message #44 received at 471896@bugs.debian.org (full text, mbox):

From: Kurt Roeckx <kurt@roeckx.be>
To: Sven Joachim <svenjoac@gmx.de>, 471896@bugs.debian.org
Cc: "Valery V. Vorotyntsev" <valery.vv@gmail.com>
Subject: Re: [Pkg-openssl-devel] Bug#471896: emacs22-el: tls.el cannot connect with openssl
Date: Fri, 21 Mar 2008 18:40:27 +0100
On Fri, Mar 21, 2008 at 03:42:53PM +0100, Sven Joachim wrote:
> On 2008-03-21 10:50 +0100, Valery V. Vorotyntsev wrote:
> 
> > On 3/21/08, Sven Joachim <svenjoac@gmx.de> wrote:
> >> You could try to downgrade openssl and maybe libssl0.9.8, if you'd like
> >>  to find out.
> >
> > Right. I've downgraded to `libssl0.9.8_0.9.8g-4' and `openssl_0.9.8g-4'.
> > `-no_ssl2' works with them.
> 
> Okay, I'll reassign this bug to openssl then.  BTW, connection to other
> servers seems to work with -no_ssl2, I tested a few HTTPS sites.

This is probaly related to #471681.


Kurt





Information forwarded to debian-bugs-dist@lists.debian.org, Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>:
Bug#471896; Package openssl. Full text and rfc822 format available.

Acknowledgement sent to Kurt Roeckx <kurt@roeckx.be>:
Extra info received and forwarded to list. Copy sent to Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>. Full text and rfc822 format available.

Message #49 received at 471896@bugs.debian.org (full text, mbox):

From: Kurt Roeckx <kurt@roeckx.be>
To: Sven Joachim <svenjoac@gmx.de>, 471896@bugs.debian.org
Cc: "Valery V. Vorotyntsev" <valery.vv@gmail.com>
Subject: Re: [Pkg-openssl-devel] Bug#471896: Bug#471896: emacs22-el: tls.el cannot connect with openssl
Date: Sun, 23 Mar 2008 20:09:22 +0100
On Fri, Mar 21, 2008 at 06:40:27PM +0100, Kurt Roeckx wrote:
> On Fri, Mar 21, 2008 at 03:42:53PM +0100, Sven Joachim wrote:
> > On 2008-03-21 10:50 +0100, Valery V. Vorotyntsev wrote:
> > 
> > > On 3/21/08, Sven Joachim <svenjoac@gmx.de> wrote:
> > >> You could try to downgrade openssl and maybe libssl0.9.8, if you'd like
> > >>  to find out.
> > >
> > > Right. I've downgraded to `libssl0.9.8_0.9.8g-4' and `openssl_0.9.8g-4'.
> > > `-no_ssl2' works with them.
> > 
> > Okay, I'll reassign this bug to openssl then.  BTW, connection to other
> > servers seems to work with -no_ssl2, I tested a few HTTPS sites.
> 
> This is probaly related to #471681.

An other workaround is to use the "-no_ticket" option.

I think this is actually a bug in the implementation of whatever google
is running.  It takes a long time to send a reply, and then doesn't seem
to send a valid reply.


Kurt





Reply sent to Kurt Roeckx <kurt@roeckx.be>:
You have taken responsibility. (Sun, 19 Dec 2010 16:45:08 GMT) Full text and rfc822 format available.

Notification sent to "Valery V. Vorotyntsev" <valery.vv@gmail.com>:
Bug acknowledged by developer. (Sun, 19 Dec 2010 16:45:08 GMT) Full text and rfc822 format available.

Message #54 received at 471896-done@bugs.debian.org (full text, mbox):

From: Kurt Roeckx <kurt@roeckx.be>
To: valery.vv@gmail.com
Cc: 471896-done@bugs.debian.org
Subject: openssl: connection to talk.google.com:443 with -no_ssl2 fails
Date: Sun, 19 Dec 2010 17:29:46 +0100
Hi,

Since this no longer seems to be an issue, I'm closing this bug.
If someone thinks there still is a problem please reopen or file
a new bug.


Kurt





Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Mon, 17 Jan 2011 07:36:11 GMT) Full text and rfc822 format available.

Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Apr 16 16:32:49 2014; Machine Name: buxtehude.debian.org

Debian Bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.