Re: Thunderbird Issue

2012-01-03 Thread The Doctor
On Tue, Jan 03, 2012 at 10:57:42PM -0700, The Doctor wrote:
> On Tue, Jan 03, 2012 at 11:16:36PM +0100, Dr. Stephen Henson wrote:
> > On Tue, Jan 03, 2012, Dr. Stephen Henson wrote:
> > 
> > > On Tue, Jan 03, 2012, The Doctor wrote:
> > > 
> > > > Finally got Openssl 1.0.1 daily working 
> > > > 
> > > > However,
> > > > 
> > > > Mozilla Thunderbird is choking saying
> > > > 
> > > > SSL received a malformed Server Hello handshake message.
> > > > 
> > > > (Error code: ssl_error_rx_malformed_server_hello)
> > > > 
> > > > 
> > > > No such problem in Outlook Express.
> > > > 
> > > 
> > > I can confirm I can reproduce the problem. Looking into it. Temporary
> > > workaround is to use no-heartbeats as a configuration option.
> > > 
> > 
> > Should be fixed now, thanks for the report.
> > 
> > Please try tomorrows snapshot or apply this patch:
> > 
> > http://cvs.openssl.org/chngview?cn=21914
> > 
> > Steve.
> 
> 
> Error log reports
> 
> Jan  3 22:21:19 gallifrey doctor[42]: exim[13062]: 2012-01-03 22:21:19 TLS 
> error on connection from vg138.ntf.els4.ticketmaster.com [209.104.37.138] 
> (SSL_accept): error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
> Jan  3 22:29:22 gallifrey doctor[42]: exim[16704]: 2012-01-03 22:29:22 TLS 
> error on connection from st.dwins.com [211.78.81.129] (SSL_accept): 
> error::lib(0):func(0):reason(0)
> Jan  3 22:31:32 gallifrey doctor[42]: exim[16960]: 2012-01-03 22:31:32 TLS 
> error on connection from vg198.ntf.els4.ticketmaster.com [209.104.37.198] 
> (SSL_accept): error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
> Jan  3 22:34:55 gallifrey doctor[42]: exim[17753]: 2012-01-03 22:34:55 TLS 
> error on connection from peebles.dataspaces.com [216.176.58.138] 
> (SSL_accept): error::lib(0):func(0):reason(0)
> Jan  3 22:36:07 gallifrey doctor[42]: exim[18025]: 2012-01-03 22:36:07 TLS 
> error on connection from st.dwins.com [211.78.81.129] (SSL_accept): 
> error::lib(0):func(0):reason(0)
> Jan  3 22:41:41 gallifrey doctor[42]: exim[18935]: 2012-01-03 22:41:41 TLS 
> error on connection from vg94.ntf.els4.ticketmaster.com [209.104.37.94] 
> (SSL_accept): error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
> Jan  3 22:44:53 gallifrey doctor[42]: exim[18861]: 2012-01-03 22:44:53 TLS 
> error on connection from st.dwins.com [211.78.81.129] (SSL_accept): timed out
> Jan  3 22:52:58 gallifrey doctor[42]: exim[185]: 2012-01-03 22:52:58 TLS 
> error on connection from s010600226b4f684c.ed.shawcable.net [68.149.51.98] 
> (SSL_accept): error:14094415:SSL routines:SSL3_READ_BYTES:sslv3 alert 
> certificate expired
> Jan  3 22:53:18 gallifrey doctor[42]: exim[217]: 2012-01-03 22:53:18 TLS 
> error on connection from s010600226b4f684c.ed.shawcable.net [68.149.51.98] 
> (SSL_accept): error:14094415:SSL routines:SSL3_READ_BYTES:sslv3 alert 
> certificate expired
> Jan  3 22:55:03 gallifrey doctor[42]: exim[447]: 2012-01-03 22:55:03 TLS 
> error on connection from s010600226b4f684c.ed.shawcable.net [68.149.51.98] 
> (SSL_accept): error::lib(0):func(0):reason(0) 
>


ITs working.  Thunderbird has to accept the next Exim cert.
 
> > --
> > Dr Stephen N. Henson. OpenSSL project core developer.
> > Commercial tech support now available see: http://www.openssl.org
> > __
> > OpenSSL Project http://www.openssl.org
> > User Support Mailing Listopenssl-users@openssl.org
> > Automated List Manager   majord...@openssl.org
> 
> -- 
> Member - Liberal InternationalThis is doc...@nl2k.ab.ca Ici 
> doc...@nl2k.ab.ca
> God, Queen and country! Never Satan President Republic! Beware AntiChrist 
> rising! 
> https://www.fullyfollow.me/rootnl2k
> Merry Christmas 2011 and Happy New Year 2012 !
> __
> OpenSSL Project http://www.openssl.org
> User Support Mailing Listopenssl-users@openssl.org
> Automated List Manager   majord...@openssl.org

-- 
Member - Liberal International  This is doc...@nl2k.ab.ca Ici doc...@nl2k.ab.ca
God, Queen and country! Never Satan President Republic! Beware AntiChrist 
rising! 
https://www.fullyfollow.me/rootnl2k
Merry Christmas 2011 and Happy New Year 2012 !
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org


Re: Thunderbird Issue

2012-01-03 Thread The Doctor
On Tue, Jan 03, 2012 at 11:16:36PM +0100, Dr. Stephen Henson wrote:
> On Tue, Jan 03, 2012, Dr. Stephen Henson wrote:
> 
> > On Tue, Jan 03, 2012, The Doctor wrote:
> > 
> > > Finally got Openssl 1.0.1 daily working 
> > > 
> > > However,
> > > 
> > > Mozilla Thunderbird is choking saying
> > > 
> > > SSL received a malformed Server Hello handshake message.
> > > 
> > > (Error code: ssl_error_rx_malformed_server_hello)
> > > 
> > > 
> > > No such problem in Outlook Express.
> > > 
> > 
> > I can confirm I can reproduce the problem. Looking into it. Temporary
> > workaround is to use no-heartbeats as a configuration option.
> > 
> 
> Should be fixed now, thanks for the report.
> 
> Please try tomorrows snapshot or apply this patch:
> 
> http://cvs.openssl.org/chngview?cn=21914
> 
> Steve.


Error log reports

Jan  3 22:21:19 gallifrey doctor[42]: exim[13062]: 2012-01-03 22:21:19 TLS 
error on connection from vg138.ntf.els4.ticketmaster.com [209.104.37.138] 
(SSL_accept): error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
Jan  3 22:29:22 gallifrey doctor[42]: exim[16704]: 2012-01-03 22:29:22 TLS 
error on connection from st.dwins.com [211.78.81.129] (SSL_accept): 
error::lib(0):func(0):reason(0)
Jan  3 22:31:32 gallifrey doctor[42]: exim[16960]: 2012-01-03 22:31:32 TLS 
error on connection from vg198.ntf.els4.ticketmaster.com [209.104.37.198] 
(SSL_accept): error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
Jan  3 22:34:55 gallifrey doctor[42]: exim[17753]: 2012-01-03 22:34:55 TLS 
error on connection from peebles.dataspaces.com [216.176.58.138] (SSL_accept): 
error::lib(0):func(0):reason(0)
Jan  3 22:36:07 gallifrey doctor[42]: exim[18025]: 2012-01-03 22:36:07 TLS 
error on connection from st.dwins.com [211.78.81.129] (SSL_accept): 
error::lib(0):func(0):reason(0)
Jan  3 22:41:41 gallifrey doctor[42]: exim[18935]: 2012-01-03 22:41:41 TLS 
error on connection from vg94.ntf.els4.ticketmaster.com [209.104.37.94] 
(SSL_accept): error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
Jan  3 22:44:53 gallifrey doctor[42]: exim[18861]: 2012-01-03 22:44:53 TLS 
error on connection from st.dwins.com [211.78.81.129] (SSL_accept): timed out
Jan  3 22:52:58 gallifrey doctor[42]: exim[185]: 2012-01-03 22:52:58 TLS error 
on connection from s010600226b4f684c.ed.shawcable.net [68.149.51.98] 
(SSL_accept): error:14094415:SSL routines:SSL3_READ_BYTES:sslv3 alert 
certificate expired
Jan  3 22:53:18 gallifrey doctor[42]: exim[217]: 2012-01-03 22:53:18 TLS error 
on connection from s010600226b4f684c.ed.shawcable.net [68.149.51.98] 
(SSL_accept): error:14094415:SSL routines:SSL3_READ_BYTES:sslv3 alert 
certificate expired
Jan  3 22:55:03 gallifrey doctor[42]: exim[447]: 2012-01-03 22:55:03 TLS error 
on connection from s010600226b4f684c.ed.shawcable.net [68.149.51.98] 
(SSL_accept): error::lib(0):func(0):reason(0) 

> --
> Dr Stephen N. Henson. OpenSSL project core developer.
> Commercial tech support now available see: http://www.openssl.org
> __
> OpenSSL Project http://www.openssl.org
> User Support Mailing Listopenssl-users@openssl.org
> Automated List Manager   majord...@openssl.org

-- 
Member - Liberal International  This is doc...@nl2k.ab.ca Ici doc...@nl2k.ab.ca
God, Queen and country! Never Satan President Republic! Beware AntiChrist 
rising! 
https://www.fullyfollow.me/rootnl2k
Merry Christmas 2011 and Happy New Year 2012 !
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org


Re: Thunderbird Issue

2012-01-03 Thread The Doctor
On Tue, Jan 03, 2012 at 06:08:54PM -0700, The Doctor wrote:
> On Tue, Jan 03, 2012 at 09:36:24PM +0100, Dr. Stephen Henson wrote:
> > On Tue, Jan 03, 2012, The Doctor wrote:
> > 
> > > Finally got Openssl 1.0.1 daily working 
> > > 
> > > However,
> > > 
> > > Mozilla Thunderbird is choking saying
> > > 
> > > SSL received a malformed Server Hello handshake message.
> > > 
> > > (Error code: ssl_error_rx_malformed_server_hello)
> > > 
> > > 
> > > No such problem in Outlook Express.
> > > 
> > 
> > I can confirm I can reproduce the problem. Looking into it. Temporary
> > workaround is to use no-heartbeats as a configuration option.
> >
> 
> 
> Please explain whaty you are saying.
>

Nwever mind.

I caught the explanation.
  
> > Steve.
> > --
> > Dr Stephen N. Henson. OpenSSL project core developer.
> > Commercial tech support now available see: http://www.openssl.org
> > __
> > OpenSSL Project http://www.openssl.org
> > User Support Mailing Listopenssl-users@openssl.org
> > Automated List Manager   majord...@openssl.org
> 
> -- 
> Member - Liberal InternationalThis is doc...@nl2k.ab.ca Ici 
> doc...@nl2k.ab.ca
> God, Queen and country! Never Satan President Republic! Beware AntiChrist 
> rising! 
> https://www.fullyfollow.me/rootnl2k
> Merry Christmas 2011 and Happy New Year 2012 !
> __
> OpenSSL Project http://www.openssl.org
> User Support Mailing Listopenssl-users@openssl.org
> Automated List Manager   majord...@openssl.org

-- 
Member - Liberal International  This is doc...@nl2k.ab.ca Ici doc...@nl2k.ab.ca
God, Queen and country! Never Satan President Republic! Beware AntiChrist 
rising! 
https://www.fullyfollow.me/rootnl2k
Merry Christmas 2011 and Happy New Year 2012 !
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org


Re: Thunderbird Issue

2012-01-03 Thread The Doctor
On Tue, Jan 03, 2012 at 09:36:24PM +0100, Dr. Stephen Henson wrote:
> On Tue, Jan 03, 2012, The Doctor wrote:
> 
> > Finally got Openssl 1.0.1 daily working 
> > 
> > However,
> > 
> > Mozilla Thunderbird is choking saying
> > 
> > SSL received a malformed Server Hello handshake message.
> > 
> > (Error code: ssl_error_rx_malformed_server_hello)
> > 
> > 
> > No such problem in Outlook Express.
> > 
> 
> I can confirm I can reproduce the problem. Looking into it. Temporary
> workaround is to use no-heartbeats as a configuration option.
>


Please explain whaty you are saying.
 
> Steve.
> --
> Dr Stephen N. Henson. OpenSSL project core developer.
> Commercial tech support now available see: http://www.openssl.org
> __
> OpenSSL Project http://www.openssl.org
> User Support Mailing Listopenssl-users@openssl.org
> Automated List Manager   majord...@openssl.org

-- 
Member - Liberal International  This is doc...@nl2k.ab.ca Ici doc...@nl2k.ab.ca
God, Queen and country! Never Satan President Republic! Beware AntiChrist 
rising! 
https://www.fullyfollow.me/rootnl2k
Merry Christmas 2011 and Happy New Year 2012 !
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org


Re: Thunderbird Issue

2012-01-03 Thread Dr. Stephen Henson
On Tue, Jan 03, 2012, Dr. Stephen Henson wrote:

> On Tue, Jan 03, 2012, The Doctor wrote:
> 
> > Finally got Openssl 1.0.1 daily working 
> > 
> > However,
> > 
> > Mozilla Thunderbird is choking saying
> > 
> > SSL received a malformed Server Hello handshake message.
> > 
> > (Error code: ssl_error_rx_malformed_server_hello)
> > 
> > 
> > No such problem in Outlook Express.
> > 
> 
> I can confirm I can reproduce the problem. Looking into it. Temporary
> workaround is to use no-heartbeats as a configuration option.
> 

Should be fixed now, thanks for the report.

Please try tomorrows snapshot or apply this patch:

http://cvs.openssl.org/chngview?cn=21914

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org


Re: Thunderbird Issue

2012-01-03 Thread Dr. Stephen Henson
On Tue, Jan 03, 2012, The Doctor wrote:

> Finally got Openssl 1.0.1 daily working 
> 
> However,
> 
> Mozilla Thunderbird is choking saying
> 
> SSL received a malformed Server Hello handshake message.
> 
> (Error code: ssl_error_rx_malformed_server_hello)
> 
> 
> No such problem in Outlook Express.
> 

I can confirm I can reproduce the problem. Looking into it. Temporary
workaround is to use no-heartbeats as a configuration option.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org


Re: Thunderbird Issue

2012-01-03 Thread Gaiseric Vandal

Are you using OpenSSL to generate a certificate for a mail server?

On 01/03/2012 01:52 PM, The Doctor wrote:

Finally got Openssl 1.0.1 daily working

However,

Mozilla Thunderbird is choking saying

SSL received a malformed Server Hello handshake message.

(Error code: ssl_error_rx_malformed_server_hello)


No such problem in Outlook Express.



__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org


Thunderbird Issue

2012-01-03 Thread The Doctor
Finally got Openssl 1.0.1 daily working 

However,

Mozilla Thunderbird is choking saying

SSL received a malformed Server Hello handshake message.

(Error code: ssl_error_rx_malformed_server_hello)


No such problem in Outlook Express.

-- 
Member - Liberal International  This is doc...@nl2k.ab.ca Ici doc...@nl2k.ab.ca
God, Queen and country! Never Satan President Republic! Beware AntiChrist 
rising! 
https://www.fullyfollow.me/rootnl2k
Merry Christmas 2011 and Happy New Year 2012 !
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org