Re: Thunderbird Issue
On Tue, Jan 03, 2012 at 10:57:42PM -0700, The Doctor wrote: > On Tue, Jan 03, 2012 at 11:16:36PM +0100, Dr. Stephen Henson wrote: > > On Tue, Jan 03, 2012, Dr. Stephen Henson wrote: > > > > > On Tue, Jan 03, 2012, The Doctor wrote: > > > > > > > Finally got Openssl 1.0.1 daily working > > > > > > > > However, > > > > > > > > Mozilla Thunderbird is choking saying > > > > > > > > SSL received a malformed Server Hello handshake message. > > > > > > > > (Error code: ssl_error_rx_malformed_server_hello) > > > > > > > > > > > > No such problem in Outlook Express. > > > > > > > > > > I can confirm I can reproduce the problem. Looking into it. Temporary > > > workaround is to use no-heartbeats as a configuration option. > > > > > > > Should be fixed now, thanks for the report. > > > > Please try tomorrows snapshot or apply this patch: > > > > http://cvs.openssl.org/chngview?cn=21914 > > > > Steve. > > > Error log reports > > Jan 3 22:21:19 gallifrey doctor[42]: exim[13062]: 2012-01-03 22:21:19 TLS > error on connection from vg138.ntf.els4.ticketmaster.com [209.104.37.138] > (SSL_accept): error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number > Jan 3 22:29:22 gallifrey doctor[42]: exim[16704]: 2012-01-03 22:29:22 TLS > error on connection from st.dwins.com [211.78.81.129] (SSL_accept): > error::lib(0):func(0):reason(0) > Jan 3 22:31:32 gallifrey doctor[42]: exim[16960]: 2012-01-03 22:31:32 TLS > error on connection from vg198.ntf.els4.ticketmaster.com [209.104.37.198] > (SSL_accept): error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number > Jan 3 22:34:55 gallifrey doctor[42]: exim[17753]: 2012-01-03 22:34:55 TLS > error on connection from peebles.dataspaces.com [216.176.58.138] > (SSL_accept): error::lib(0):func(0):reason(0) > Jan 3 22:36:07 gallifrey doctor[42]: exim[18025]: 2012-01-03 22:36:07 TLS > error on connection from st.dwins.com [211.78.81.129] (SSL_accept): > error::lib(0):func(0):reason(0) > Jan 3 22:41:41 gallifrey doctor[42]: exim[18935]: 2012-01-03 22:41:41 TLS > error on connection from vg94.ntf.els4.ticketmaster.com [209.104.37.94] > (SSL_accept): error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number > Jan 3 22:44:53 gallifrey doctor[42]: exim[18861]: 2012-01-03 22:44:53 TLS > error on connection from st.dwins.com [211.78.81.129] (SSL_accept): timed out > Jan 3 22:52:58 gallifrey doctor[42]: exim[185]: 2012-01-03 22:52:58 TLS > error on connection from s010600226b4f684c.ed.shawcable.net [68.149.51.98] > (SSL_accept): error:14094415:SSL routines:SSL3_READ_BYTES:sslv3 alert > certificate expired > Jan 3 22:53:18 gallifrey doctor[42]: exim[217]: 2012-01-03 22:53:18 TLS > error on connection from s010600226b4f684c.ed.shawcable.net [68.149.51.98] > (SSL_accept): error:14094415:SSL routines:SSL3_READ_BYTES:sslv3 alert > certificate expired > Jan 3 22:55:03 gallifrey doctor[42]: exim[447]: 2012-01-03 22:55:03 TLS > error on connection from s010600226b4f684c.ed.shawcable.net [68.149.51.98] > (SSL_accept): error::lib(0):func(0):reason(0) > ITs working. Thunderbird has to accept the next Exim cert. > > -- > > Dr Stephen N. Henson. OpenSSL project core developer. > > Commercial tech support now available see: http://www.openssl.org > > __ > > OpenSSL Project http://www.openssl.org > > User Support Mailing Listopenssl-users@openssl.org > > Automated List Manager majord...@openssl.org > > -- > Member - Liberal InternationalThis is doc...@nl2k.ab.ca Ici > doc...@nl2k.ab.ca > God, Queen and country! Never Satan President Republic! Beware AntiChrist > rising! > https://www.fullyfollow.me/rootnl2k > Merry Christmas 2011 and Happy New Year 2012 ! > __ > OpenSSL Project http://www.openssl.org > User Support Mailing Listopenssl-users@openssl.org > Automated List Manager majord...@openssl.org -- Member - Liberal International This is doc...@nl2k.ab.ca Ici doc...@nl2k.ab.ca God, Queen and country! Never Satan President Republic! Beware AntiChrist rising! https://www.fullyfollow.me/rootnl2k Merry Christmas 2011 and Happy New Year 2012 ! __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
Re: Thunderbird Issue
On Tue, Jan 03, 2012 at 11:16:36PM +0100, Dr. Stephen Henson wrote: > On Tue, Jan 03, 2012, Dr. Stephen Henson wrote: > > > On Tue, Jan 03, 2012, The Doctor wrote: > > > > > Finally got Openssl 1.0.1 daily working > > > > > > However, > > > > > > Mozilla Thunderbird is choking saying > > > > > > SSL received a malformed Server Hello handshake message. > > > > > > (Error code: ssl_error_rx_malformed_server_hello) > > > > > > > > > No such problem in Outlook Express. > > > > > > > I can confirm I can reproduce the problem. Looking into it. Temporary > > workaround is to use no-heartbeats as a configuration option. > > > > Should be fixed now, thanks for the report. > > Please try tomorrows snapshot or apply this patch: > > http://cvs.openssl.org/chngview?cn=21914 > > Steve. Error log reports Jan 3 22:21:19 gallifrey doctor[42]: exim[13062]: 2012-01-03 22:21:19 TLS error on connection from vg138.ntf.els4.ticketmaster.com [209.104.37.138] (SSL_accept): error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number Jan 3 22:29:22 gallifrey doctor[42]: exim[16704]: 2012-01-03 22:29:22 TLS error on connection from st.dwins.com [211.78.81.129] (SSL_accept): error::lib(0):func(0):reason(0) Jan 3 22:31:32 gallifrey doctor[42]: exim[16960]: 2012-01-03 22:31:32 TLS error on connection from vg198.ntf.els4.ticketmaster.com [209.104.37.198] (SSL_accept): error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number Jan 3 22:34:55 gallifrey doctor[42]: exim[17753]: 2012-01-03 22:34:55 TLS error on connection from peebles.dataspaces.com [216.176.58.138] (SSL_accept): error::lib(0):func(0):reason(0) Jan 3 22:36:07 gallifrey doctor[42]: exim[18025]: 2012-01-03 22:36:07 TLS error on connection from st.dwins.com [211.78.81.129] (SSL_accept): error::lib(0):func(0):reason(0) Jan 3 22:41:41 gallifrey doctor[42]: exim[18935]: 2012-01-03 22:41:41 TLS error on connection from vg94.ntf.els4.ticketmaster.com [209.104.37.94] (SSL_accept): error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number Jan 3 22:44:53 gallifrey doctor[42]: exim[18861]: 2012-01-03 22:44:53 TLS error on connection from st.dwins.com [211.78.81.129] (SSL_accept): timed out Jan 3 22:52:58 gallifrey doctor[42]: exim[185]: 2012-01-03 22:52:58 TLS error on connection from s010600226b4f684c.ed.shawcable.net [68.149.51.98] (SSL_accept): error:14094415:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate expired Jan 3 22:53:18 gallifrey doctor[42]: exim[217]: 2012-01-03 22:53:18 TLS error on connection from s010600226b4f684c.ed.shawcable.net [68.149.51.98] (SSL_accept): error:14094415:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate expired Jan 3 22:55:03 gallifrey doctor[42]: exim[447]: 2012-01-03 22:55:03 TLS error on connection from s010600226b4f684c.ed.shawcable.net [68.149.51.98] (SSL_accept): error::lib(0):func(0):reason(0) > -- > Dr Stephen N. Henson. OpenSSL project core developer. > Commercial tech support now available see: http://www.openssl.org > __ > OpenSSL Project http://www.openssl.org > User Support Mailing Listopenssl-users@openssl.org > Automated List Manager majord...@openssl.org -- Member - Liberal International This is doc...@nl2k.ab.ca Ici doc...@nl2k.ab.ca God, Queen and country! Never Satan President Republic! Beware AntiChrist rising! https://www.fullyfollow.me/rootnl2k Merry Christmas 2011 and Happy New Year 2012 ! __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
Re: Thunderbird Issue
On Tue, Jan 03, 2012 at 06:08:54PM -0700, The Doctor wrote: > On Tue, Jan 03, 2012 at 09:36:24PM +0100, Dr. Stephen Henson wrote: > > On Tue, Jan 03, 2012, The Doctor wrote: > > > > > Finally got Openssl 1.0.1 daily working > > > > > > However, > > > > > > Mozilla Thunderbird is choking saying > > > > > > SSL received a malformed Server Hello handshake message. > > > > > > (Error code: ssl_error_rx_malformed_server_hello) > > > > > > > > > No such problem in Outlook Express. > > > > > > > I can confirm I can reproduce the problem. Looking into it. Temporary > > workaround is to use no-heartbeats as a configuration option. > > > > > Please explain whaty you are saying. > Nwever mind. I caught the explanation. > > Steve. > > -- > > Dr Stephen N. Henson. OpenSSL project core developer. > > Commercial tech support now available see: http://www.openssl.org > > __ > > OpenSSL Project http://www.openssl.org > > User Support Mailing Listopenssl-users@openssl.org > > Automated List Manager majord...@openssl.org > > -- > Member - Liberal InternationalThis is doc...@nl2k.ab.ca Ici > doc...@nl2k.ab.ca > God, Queen and country! Never Satan President Republic! Beware AntiChrist > rising! > https://www.fullyfollow.me/rootnl2k > Merry Christmas 2011 and Happy New Year 2012 ! > __ > OpenSSL Project http://www.openssl.org > User Support Mailing Listopenssl-users@openssl.org > Automated List Manager majord...@openssl.org -- Member - Liberal International This is doc...@nl2k.ab.ca Ici doc...@nl2k.ab.ca God, Queen and country! Never Satan President Republic! Beware AntiChrist rising! https://www.fullyfollow.me/rootnl2k Merry Christmas 2011 and Happy New Year 2012 ! __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
Re: Thunderbird Issue
On Tue, Jan 03, 2012 at 09:36:24PM +0100, Dr. Stephen Henson wrote: > On Tue, Jan 03, 2012, The Doctor wrote: > > > Finally got Openssl 1.0.1 daily working > > > > However, > > > > Mozilla Thunderbird is choking saying > > > > SSL received a malformed Server Hello handshake message. > > > > (Error code: ssl_error_rx_malformed_server_hello) > > > > > > No such problem in Outlook Express. > > > > I can confirm I can reproduce the problem. Looking into it. Temporary > workaround is to use no-heartbeats as a configuration option. > Please explain whaty you are saying. > Steve. > -- > Dr Stephen N. Henson. OpenSSL project core developer. > Commercial tech support now available see: http://www.openssl.org > __ > OpenSSL Project http://www.openssl.org > User Support Mailing Listopenssl-users@openssl.org > Automated List Manager majord...@openssl.org -- Member - Liberal International This is doc...@nl2k.ab.ca Ici doc...@nl2k.ab.ca God, Queen and country! Never Satan President Republic! Beware AntiChrist rising! https://www.fullyfollow.me/rootnl2k Merry Christmas 2011 and Happy New Year 2012 ! __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
Re: Thunderbird Issue
On Tue, Jan 03, 2012, Dr. Stephen Henson wrote: > On Tue, Jan 03, 2012, The Doctor wrote: > > > Finally got Openssl 1.0.1 daily working > > > > However, > > > > Mozilla Thunderbird is choking saying > > > > SSL received a malformed Server Hello handshake message. > > > > (Error code: ssl_error_rx_malformed_server_hello) > > > > > > No such problem in Outlook Express. > > > > I can confirm I can reproduce the problem. Looking into it. Temporary > workaround is to use no-heartbeats as a configuration option. > Should be fixed now, thanks for the report. Please try tomorrows snapshot or apply this patch: http://cvs.openssl.org/chngview?cn=21914 Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
Re: Thunderbird Issue
On Tue, Jan 03, 2012, The Doctor wrote: > Finally got Openssl 1.0.1 daily working > > However, > > Mozilla Thunderbird is choking saying > > SSL received a malformed Server Hello handshake message. > > (Error code: ssl_error_rx_malformed_server_hello) > > > No such problem in Outlook Express. > I can confirm I can reproduce the problem. Looking into it. Temporary workaround is to use no-heartbeats as a configuration option. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
Re: Thunderbird Issue
Are you using OpenSSL to generate a certificate for a mail server? On 01/03/2012 01:52 PM, The Doctor wrote: Finally got Openssl 1.0.1 daily working However, Mozilla Thunderbird is choking saying SSL received a malformed Server Hello handshake message. (Error code: ssl_error_rx_malformed_server_hello) No such problem in Outlook Express. __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org
Thunderbird Issue
Finally got Openssl 1.0.1 daily working However, Mozilla Thunderbird is choking saying SSL received a malformed Server Hello handshake message. (Error code: ssl_error_rx_malformed_server_hello) No such problem in Outlook Express. -- Member - Liberal International This is doc...@nl2k.ab.ca Ici doc...@nl2k.ab.ca God, Queen and country! Never Satan President Republic! Beware AntiChrist rising! https://www.fullyfollow.me/rootnl2k Merry Christmas 2011 and Happy New Year 2012 ! __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org