Package: lynx Version: 2.8.5-2 Followup-For: Bug #299130 While trying to contact the Wall Street Journal's online site wsj.com we're unable to make a TLS connect to the server. Our client brought this question to the lynx-dev list and got the following response.
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> From: Thomas Dickey <[EMAIL PROTECTED]> To: John Red-Horse <[EMAIL PROTECTED]> cc: lynx-dev@nongnu.org Subject: Re: [Lynx-dev] Problems With A User/Password Login Submit Date: Mon, 26 Sep 2005 18:12:28 -0400 (EDT) Message-ID: <[EMAIL PROTECTED]> On Fri, 23 Sep 2005, John Red-Horse wrote: >Dear Pros, > >On one of the systems that I use on my ISP's network, I'm having a >problem logging into my account at wsj.com via the https-savvy form. > >Let me provide some background. > >One is running a Linux OS (this is the system that fails to make the >connection properly): > >Linux chishio 2.4.29-rc1 #1 SMP Fri Jan 7 16:41:59 MST 2005 i686 GNU/Linux > >with lynx version (as reported from https://www.gnutls.org:5555/): gnutls is reported to be rather buggy (I've only tested it lightly, but recall reading bug reports). > >Client's browser version: Lynx/2.8.5rel.1 libwww-FM/2.14 SSL-MM/1.4.1 >GNUTLS/1.0.16 > >Cipher key size: 128 > >the other is SunOS: > >SunOS yagi 5.8 Generic_108528-10 sun4u sparc SUNW,UltraSPARC-IIi-Engine > >Client's browser version: Lynx/2.8.4rel.1 libwww-FM/2.14 SSL-MM/1.4.1 >OpenSSL/0.9.4 You can build with OpenSSL on Linux also. There's no technical reason for preferring gnutls over OpenSSL. -- Thomas E. Dickey http://invisible-island.net ftp://invisible-island.net <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> Here's a snippit of the connection with Trace on. <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> User message: Trace ON! GETCH: Got 0x103. LYReadCmdKey(0) ->Up Arrow (0x100) GETCH: Got 0x78. LYReadCmdKey(0) ->x (0x78) SubmitForm link_name= link_value=Log In [snip] Looking up users2.wsj.com Making HTTPS connection to users2.wsj.com TCP: Error 115 in `SOCKET_ERRNO' after call to this socket's first connect() +failed. Operation now in progress TCP: Error 115 in `SOCKET_ERRNO' after call to this socket's first select() +failed. Operation now in progress Retrying connection without TLS. HTParse: aName:`https://users2.wsj.com/lmda/do/submitLogin' relatedName:`' want: host HTParse: result:`users2.wsj.com' Looking up users2.wsj.com Making HTTPS connection to users2.wsj.com TCP: Error 115 in `SOCKET_ERRNO' after call to this socket's first connect() +failed. Operation now in progress TCP: Error 115 in `SOCKET_ERRNO' after call to this socket's first select() +failed. Operation now in progress HTTP: Unable to complete SSL handshake for +'https://users2.wsj.com/lmda/do/submitLogin', SSL_connect=0, SSL error stack +dump follows HTTP: SSL: A TLS packet with unexpected length was received. <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><> -- System Information: Debian Release: 3.1 Architecture: i386 (i686) Kernel: Linux 2.4.29-rc1 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages lynx depends on: ii libbz2-1.0 1.0.2-7 high-quality block-sorting file co ii libc6 2.3.2.ds1-22 GNU C Library: Shared libraries an ii libgnutls11 1.0.16-13.1 GNU TLS library - runtime library ii libncursesw5 5.4-4 Shared libraries for terminal hand ii zlib1g 1:1.2.2-4.sarge.2 compression library - runtime -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]