'https...' sstAsUrl fetch - handshake failed (wrong version number)

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

'https...' sstAsUrl fetch - handshake failed (wrong version number)

Petr Fischer
Hello,

when I do this in workspace:

'https://www.google.com' sstAsUrl fetch.
'https://www.apple.com' sstAsUrl fetch.

this error occurs:

SstSendError(''SSL handshake failed: INTERNAL_ERROR (80): SSL3_GET_RECORD:wrong version number'')

or:

SstSendError(''SSL handshake failed: HANDSHAKE_FAILURE (40): SSL3_READ_BYTES'')

VAST: 8.5.2

Any ideas? Thanks!

--
You received this message because you are subscribed to the Google Groups "VA Smalltalk" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
Visit this group at https://groups.google.com/group/va-smalltalk.
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|

Re: 'https...' sstAsUrl fetch - handshake failed (wrong version number)

Seth Berman
Hi Petr,

8.5.2 was back when the default ssl version in the image was SSLv3.  Not a lot of servers would accept this anymore.
Browse refs to SSLv3 and change to SSLv23 (an OpenSSL misnomer...it actually will end up using TLS if the server supports it).
Your transport configurations will be cached in the image...so you will need to recache it.

Try executing [SstHttpsCommunications registerPluginConfigurations] which should recache the appropriate object
and retry your example.

Kind Regards,

- Seth

On Monday, February 19, 2018 at 7:00:42 AM UTC-5, Petr Fischer wrote:
Hello,

when I do this in workspace:

'<a href="https://www.google.com" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://www.google.com&#39;;return true;" onclick="this.href=&#39;https://www.google.com&#39;;return true;">https://www.google.com' sstAsUrl fetch.
'<a href="https://www.apple.com" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fwww.apple.com\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNF5tBgN1iCcqbROwRBzT6D6ftkUgg&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fwww.apple.com\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNF5tBgN1iCcqbROwRBzT6D6ftkUgg&#39;;return true;">https://www.apple.com' sstAsUrl fetch.

this error occurs:

SstSendError(''SSL handshake failed: INTERNAL_ERROR (80): SSL3_GET_RECORD:wrong version number'')

or:

SstSendError(''SSL handshake failed: HANDSHAKE_FAILURE (40): SSL3_READ_BYTES'')

VAST: 8.5.2

Any ideas? Thanks!

--
You received this message because you are subscribed to the Google Groups "VA Smalltalk" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
Visit this group at https://groups.google.com/group/va-smalltalk.
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|

Re: 'https...' sstAsUrl fetch - handshake failed (wrong version number)

Petr Fischer
Changed SSLv3 -> SSLv23 in:

SstHttpClient>>initializeTransportScheme:forHttpsTunnelThrough:proxyAuth:
SstHttpsCommunications>>lightTransportConfiguration

Then executed: SstHttpsCommunications registerPluginConfigurations.

Now, this error occurs:

SstSendError(''SSL handshake failed: HANDSHAKE_FAILURE (40): SSL23_GET_SERVER_HELLO'')

pf


> Hi Petr,
>
> 8.5.2 was back when the default ssl version in the image was SSLv3.  Not a
> lot of servers would accept this anymore.
> Browse refs to SSLv3 and change to SSLv23 (an OpenSSL misnomer...it
> actually will end up using TLS if the server supports it).
> Your transport configurations will be cached in the image...so you will
> need to recache it.
>
> Try executing [SstHttpsCommunications registerPluginConfigurations] which
> should recache the appropriate object
> and retry your example.
>
> Kind Regards,
>
> - Seth
>
> On Monday, February 19, 2018 at 7:00:42 AM UTC-5, Petr Fischer wrote:
> >
> > Hello,
> >
> > when I do this in workspace:
> >
> > 'https://www.google.com' sstAsUrl fetch.
> > 'https://www.apple.com' sstAsUrl fetch.
> >
> > this error occurs:
> >
> > SstSendError(''SSL handshake failed: INTERNAL_ERROR (80):
> > SSL3_GET_RECORD:wrong version number'')
> >
> > or:
> >
> > SstSendError(''SSL handshake failed: HANDSHAKE_FAILURE (40):
> > SSL3_READ_BYTES'')
> >
> > VAST: 8.5.2
> >
> > Any ideas? Thanks!
> >
>
> --
> You received this message because you are subscribed to the Google Groups "VA Smalltalk" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
> To post to this group, send email to [hidden email].
> Visit this group at https://groups.google.com/group/va-smalltalk.
> For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "VA Smalltalk" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
Visit this group at https://groups.google.com/group/va-smalltalk.
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|

Re: 'https...' sstAsUrl fetch - handshake failed (wrong version number)

Seth Berman
Hello Petr

I just tried the test case 'https://www.google.com' sstAsUrl fetch. 
on 7.0, 8.0.2 and 8.5.1 with the instructions I gave worked.

So I'm going to assume we are talking about sites like 'https://www.apple.com' and others that require the latest TLS (1.1 or 1.2).
8.5.2 can't do without additional modifications.  You would need more recent versions of openssl and you would need to modify the openssl bindings to be able to talk with them.

If you need official instantiations support with this, please send us an email at [hidden email]

Kind Regards,

- Seth

On Tuesday, February 20, 2018 at 3:17:41 AM UTC-5, Petr Fischer wrote:
Changed SSLv3 -> SSLv23 in:

SstHttpClient>>initializeTransportScheme:forHttpsTunnelThrough:proxyAuth:
SstHttpsCommunications>>lightTransportConfiguration

Then executed: SstHttpsCommunications registerPluginConfigurations.

Now, this error occurs:

SstSendError(''SSL handshake failed: HANDSHAKE_FAILURE (40): SSL23_GET_SERVER_HELLO'')

pf


> Hi Petr,
>
> 8.5.2 was back when the default ssl version in the image was SSLv3.  Not a
> lot of servers would accept this anymore.
> Browse refs to SSLv3 and change to SSLv23 (an OpenSSL misnomer...it
> actually will end up using TLS if the server supports it).
> Your transport configurations will be cached in the image...so you will
> need to recache it.
>
> Try executing [SstHttpsCommunications registerPluginConfigurations] which
> should recache the appropriate object
> and retry your example.
>
> Kind Regards,
>
> - Seth
>
> On Monday, February 19, 2018 at 7:00:42 AM UTC-5, Petr Fischer wrote:
> >
> > Hello,
> >
> > when I do this in workspace:
> >
> > '<a href="https://www.google.com" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://www.google.com&#39;;return true;" onclick="this.href=&#39;https://www.google.com&#39;;return true;">https://www.google.com' sstAsUrl fetch.
> > '<a href="https://www.apple.com" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fwww.apple.com\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNF5tBgN1iCcqbROwRBzT6D6ftkUgg&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fwww.apple.com\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNF5tBgN1iCcqbROwRBzT6D6ftkUgg&#39;;return true;">https://www.apple.com' sstAsUrl fetch.
> >
> > this error occurs:
> >
> > SstSendError(''SSL handshake failed: INTERNAL_ERROR (80):
> > SSL3_GET_RECORD:wrong version number'')
> >
> > or:
> >
> > SstSendError(''SSL handshake failed: HANDSHAKE_FAILURE (40):
> > SSL3_READ_BYTES'')
> >
> > VAST: 8.5.2
> >
> > Any ideas? Thanks!
> >
>
> --
> You received this message because you are subscribed to the Google Groups "VA Smalltalk" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
> To post to this group, send email to [hidden email].
> Visit this group at <a href="https://groups.google.com/group/va-smalltalk" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://groups.google.com/group/va-smalltalk&#39;;return true;" onclick="this.href=&#39;https://groups.google.com/group/va-smalltalk&#39;;return true;">https://groups.google.com/group/va-smalltalk.
> For more options, visit <a href="https://groups.google.com/d/optout" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://groups.google.com/d/optout&#39;;return true;" onclick="this.href=&#39;https://groups.google.com/d/optout&#39;;return true;">https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "VA Smalltalk" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
Visit this group at https://groups.google.com/group/va-smalltalk.
For more options, visit https://groups.google.com/d/optout.