Debian Bug report logs - #668147
nodejs: https connection to Facebook broken due to bug in openssl dependency

version graph

Package: openssl; Maintainer for openssl is Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>; Source for openssl is src:openssl (PTS, buildd, popcon).

Affects: nodejs

Reported by: Surendra Singhi <ssinghi@kreeti.com>

Date: Mon, 9 Apr 2012 09:15:02 UTC

Severity: normal

Merged with 666051

Found in version openssl/1.0.0h-1

Fixed in version 1.0.1b-1

Done: Kurt Roeckx <kurt@roeckx.be>

Bug is archived. No further changes may be made.

Forwarded to http://rt.openssl.org/Ticket/Display.html?id=2771

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#668147; Package nodejs. (Mon, 09 Apr 2012 09:15:05 GMT) (full text, mbox, link).


Acknowledgement sent to Surendra Singhi <ssinghi@kreeti.com>:
New Bug report received and forwarded. Copy sent to Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>. (Mon, 09 Apr 2012 09:15:09 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Surendra Singhi <ssinghi@kreeti.com>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: nodejs: https connection to Facebook broken due to bug in openssl dependency
Date: Mon, 09 Apr 2012 05:05:17 -0400
Package: nodejs
Version: 0.6.14~dfsg1-1
Severity: important


The bug in http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=666051 also effects nodejs, as it is not possible to use it to connect to Facebook, Paypal, etc.

The following code in nodejs console after a minute or two throws an error and exits.

var https = require("https")
https.get({host: "graph.facebook.com", path: "/"},  function(res) { })

node.js:201
        throw e; // process.nextTick error, or 'error' event on first tick
              ^
Error: socket hang up
    at createHangUpError (http.js:1107:15)
    at CleartextStream.<anonymous> (http.js:1210:27)
    at CleartextStream.emit (events.js:88:20)
    at Array.0 (tls.js:792:22)
    at EventEmitter._tickCallback (node.js:192:41)

A possible solution is to use an older version of openssl as a dependency.

-- System Information:
Debian Release: 6.0.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages nodejs depends on:
ii  libc-ares2              1.7.5-1          library for asyncronous name resol
ii  libc6                   2.11.3-3         Embedded GNU C Library: Shared lib
ii  libev4                  1:4.11-1         high-performance event loop librar
ii  libgcc1                 1:4.4.5-8        GCC support library
ii  libssl1.0.0             1.0.1-2          SSL shared libraries
ii  libstdc++6              4.4.5-8          The GNU Standard C++ Library v3
ii  libv8-3.8.9.16          3.8.9.16-2       v8 JavaScript engine - runtime lib
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

nodejs recommends no packages.

nodejs suggests no packages.

-- no debconf information




Information forwarded to debian-bugs-dist@lists.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#668147; Package nodejs. (Mon, 09 Apr 2012 09:39:14 GMT) (full text, mbox, link).


Acknowledgement sent to Jérémy Lal <kapouer@melix.org>:
Extra info received and forwarded to list. Copy sent to Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>. (Mon, 09 Apr 2012 09:39:14 GMT) (full text, mbox, link).


Message #10 received at 668147@bugs.debian.org (full text, mbox, reply):

From: Jérémy Lal <kapouer@melix.org>
To: 668147@bugs.debian.org
Subject: Re: Bug#668147: nodejs: https connection to Facebook broken due to bug in openssl dependency
Date: Mon, 09 Apr 2012 11:34:47 +0200
[Message part 1 (text/plain, inline)]
On 09/04/2012 11:05, Surendra Singhi wrote:
> Package: nodejs
> Version: 0.6.14~dfsg1-1
> The bug in http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=666051 also effects nodejs, as it is not possible to use it to connect to Facebook, Paypal, etc.
> A possible solution is to use an older version of openssl as a dependency.

Thank you !

It seems very much related to the discussion i had with RT,
see attached mail.

Jérémy.

[Attached Message (message/rfc822, attachment)]

Bug reassigned from package 'nodejs' to 'openssl'. Request was from Jérémy Lal <kapouer@melix.org> to control@bugs.debian.org. (Mon, 09 Apr 2012 09:42:10 GMT) (full text, mbox, link).


No longer marked as found in versions nodejs/0.6.14~dfsg1-1. Request was from Jérémy Lal <kapouer@melix.org> to control@bugs.debian.org. (Mon, 09 Apr 2012 09:42:10 GMT) (full text, mbox, link).


Set Bug forwarded-to-address to 'http://rt.openssl.org/Ticket/Display.html?id=2771'. Request was from Jérémy Lal <kapouer@melix.org> to control@bugs.debian.org. (Mon, 09 Apr 2012 09:42:11 GMT) (full text, mbox, link).


Severity set to 'normal' from 'important' Request was from Jérémy Lal <kapouer@melix.org> to control@bugs.debian.org. (Mon, 09 Apr 2012 09:42:12 GMT) (full text, mbox, link).


Marked as found in versions openssl/1.0.0h-1. Request was from Jérémy Lal <kapouer@melix.org> to control@bugs.debian.org. (Mon, 09 Apr 2012 09:42:13 GMT) (full text, mbox, link).


Merged 666051 668147 Request was from Jérémy Lal <kapouer@melix.org> to control@bugs.debian.org. (Mon, 09 Apr 2012 09:42:14 GMT) (full text, mbox, link).


Added indication that 668147 affects nodejs Request was from Jérémy Lal <kapouer@melix.org> to control@bugs.debian.org. (Mon, 09 Apr 2012 09:42:16 GMT) (full text, mbox, link).


Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Mon, 11 Jun 2012 07:45:54 GMT) (full text, mbox, link).


Bug unarchived. Request was from Jean-Christophe Dubacq <jcdubacq1@free.fr> to control@bugs.debian.org. (Wed, 03 Oct 2012 08:27:09 GMT) (full text, mbox, link).


Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Thu, 01 Nov 2012 07:27:56 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sun Jan 14 10:07:53 2018; Machine Name: beach

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.