SSL Error in Head

[Jerry Baker <je...@attbi.com>]

I'm getting SSL errors with Mozilla 1.0RC3. Netscape 4.79 and IE6 appear
to work ok.

SSL Library Error: 336151538 error:140943F2:SSL
routines:SSL3_READ_BYTES:sslv3 alert unexpected message

Any ideas?

-- 
Jerry Baker

Re: SSL Error in Head

["William A. Rowe, Jr." <wr...@rowe-clan.net>]

At 11:49 AM 6/1/2002, you wrote:
>"William A. Rowe, Jr." wrote:
> >
> > "unexpected error" makes me ask if things just aren't out of sync, before
> > even digging in.  I'll check mozilla RC1 again and bump to RC3.  BTW - 
> there
> > is no unpatched XP box in the mix, is there?
>
>Yes. I thought the XP thing was an error with chunking. Anyways, IE6
>works fine and it does HTTP 1.1 also.

Cool.  The XP thing is very specific to EXACTLY how the application or the
server daemon uses windows sockets, in combination with significant data
exchange [e.g. http GET might not trigger it, while either http POST or SSL
negotiation might.  In fact, POST+SSL seems like the most lethal combination
when sockets are used in a BSD-like mode.]

I'd suggest applying the afd.sys fix first to the server, then to the 
client, and
testing out an unpatched XP Mozilla 1.0RC3 client against a patched XP
httpd server [we know Apache/httpd has this issue.]  If the bug remains for
the client on an unpatched XP box, it's definately worth bringing to the 
attention
of the Mozilla folks.  This could also expedite adopting the patch with XP 
SP1,
if it isn't already scheduled for inclusion and the window is still open.

Bill

Re: SSL Error in Head

[Jerry Baker <je...@attbi.com>]

Jerry Baker wrote:
> 
> "William A. Rowe, Jr." wrote:
> >
> > Just a thought... make sure you are using the very same *.dll's for ssleay32
> > and libeay32 ... perhaps they are different.  Also make sure you use the very
> > same build flags (NO_WHATEVER) for mod_ssl.dsp that you use when you
> > build openssl.  See httpd.apache.org/docs-2.0/platform/win_compiling.html
> > for my comments.
> 
> No different dll's or flags.
> 
> > "unexpected error" makes me ask if things just aren't out of sync, before
> > even digging in.  I'll check mozilla RC1 again and bump to RC3.  BTW - there
> > is no unpatched XP box in the mix, is there?
> 
> Yes. I thought the XP thing was an error with chunking. Anyways, IE6
> works fine and it does HTTP 1.1 also.

Let me rephrase that. IE6 works most of the time, but the errors I do
see in IE6 do not prompt error messages to pop up in the browser, nor do
they cause entries in the error log. The IE6 errors are see under SSL
are things like images only loading halfway and the access log shows a
206 for those images.

The Mozilla error caused a pop-up alert from Mozilla itself that said
the server sent an unexpected value. The error log contained what I sent
here.

-- 
Jerry Baker

Re: SSL Error in Head

[Jerry Baker <je...@attbi.com>]

"William A. Rowe, Jr." wrote:
> 
> Just a thought... make sure you are using the very same *.dll's for ssleay32
> and libeay32 ... perhaps they are different.  Also make sure you use the very
> same build flags (NO_WHATEVER) for mod_ssl.dsp that you use when you
> build openssl.  See httpd.apache.org/docs-2.0/platform/win_compiling.html
> for my comments.

No different dll's or flags.

> "unexpected error" makes me ask if things just aren't out of sync, before
> even digging in.  I'll check mozilla RC1 again and bump to RC3.  BTW - there
> is no unpatched XP box in the mix, is there?

Yes. I thought the XP thing was an error with chunking. Anyways, IE6
works fine and it does HTTP 1.1 also.

> 
> At 02:27 AM 6/1/2002, Jerry Baker wrote:
> >I'm getting SSL errors with Mozilla 1.0RC3. Netscape 4.79 and IE6 appear
> >to work ok.
> >
> >SSL Library Error: 336151538 error:140943F2:SSL
> >routines:SSL3_READ_BYTES:sslv3 alert unexpected message
> >
> >Any ideas?
> >


-- 
Jerry Baker

Re: SSL Error in Head

["William A. Rowe, Jr." <wr...@rowe-clan.net>]

Just a thought... make sure you are using the very same *.dll's for ssleay32
and libeay32 ... perhaps they are different.  Also make sure you use the very
same build flags (NO_WHATEVER) for mod_ssl.dsp that you use when you
build openssl.  See httpd.apache.org/docs-2.0/platform/win_compiling.html
for my comments.

"unexpected error" makes me ask if things just aren't out of sync, before
even digging in.  I'll check mozilla RC1 again and bump to RC3.  BTW - there
is no unpatched XP box in the mix, is there?

Bill

At 02:27 AM 6/1/2002, Jerry Baker wrote:
>I'm getting SSL errors with Mozilla 1.0RC3. Netscape 4.79 and IE6 appear
>to work ok.
>
>SSL Library Error: 336151538 error:140943F2:SSL
>routines:SSL3_READ_BYTES:sslv3 alert unexpected message
>
>Any ideas?
>
>--
>Jerry Baker