You are viewing a plain text version of this content. The canonical link for it is here.
Posted to infrastructure-issues@apache.org by "Martijn Dashorst (JIRA)" <ji...@apache.org> on 2010/07/20 23:26:49 UTC
[jira] Created: (INFRA-2887) SSL negotiation failed: SSL error:
parse tlsext Inbox X
SSL negotiation failed: SSL error: parse tlsext Inbox X
---------------------------------------------------------------------
Key: INFRA-2887
URL: https://issues.apache.org/jira/browse/INFRA-2887
Project: Infrastructure
Issue Type: Bug
Security Level: public (Regular issues)
Components: Subversion
Reporter: Martijn Dashorst
When I try to import a 4.7MB directory structure (not too many files)
to the Apache SVN repository using the collabnet SVN client 1.6.11
(and 1.6.12) I get the following error:
svn: MKCOL of '/repos/asf/!svn/wrk/c357a0ad-6c6c-4225-bcba-af72cc55b7ee/wicket/common/site/trunk/_site/2009/12/21':
SSL negotiation failed: SSL error: parse tlsext
(https://svn.apache.org)
Things worthy of note:
- OSX snow leopard
- both 1.6.11 and 1.6.12 clients from collab.net give the same error
- I'm based in the EU (Netherlands), so I go through the EU proxy
I've split up the commit to be able to continue with my work, but did
want to report this.
Bypassing the proxy with help from the infra team did not show this
error, so there is something at work at the svn proxy level.
This is the output of svn --version:
svn, version 1.6.12 (r955767)
compiled Jun 23 2010, 12:01:54
Copyright (C) 2000-2009 CollabNet.
Subversion is open source software, see http://subversion.tigris.org/
This product includes software developed by CollabNet (http://www.Collab.Net/).
The following repository access (RA) modules are available:
* ra_neon : Module for accessing a repository via WebDAV protocol using Neon.
- handles 'http' scheme
- handles 'https' scheme
* ra_svn : Module for accessing a repository using the svn network protocol.
- with Cyrus SASL authentication
- handles 'svn' scheme
* ra_local : Module for accessing a repository on local disk.
- handles 'file' scheme
* ra_serf : Module for accessing a repository via WebDAV protocol using serf.
- handles 'http' scheme
- handles 'https' scheme
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (INFRA-2887) SSL negotiation failed: SSL error:
parse tlsext
Posted by "Tony Stevenson (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/INFRA-2887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12923286#action_12923286 ]
Tony Stevenson commented on INFRA-2887:
---------------------------------------
EU Mirror
Date: Thu, 21 Oct 2010 01:53:37 GMT
Server: Apache/2.2.16 (Unix) mod_ssl/2.2.16 OpenSSL/0.9.8k DAV/2 mod_wsgi/3.1 Python/2.6.4 SVN/1.6.12
US Master
Date: Thu, 21 Oct 2010 01:56:00 GMT
Server: Apache/2.2.16 (Unix) mod_ssl/2.2.16 OpenSSL/0.9.8k DAV/2 mod_wsgi/3.1 Python/2.6.4 SVN/1.6.12
It's unlikely to be a versioning issue related to httpd, as they're the same across the board.
If you re-run the commit, does the error go away, i.e. is it transient, or does it remain?
Either way, do you think you could grab a timestamp (inc TZ) for me please?
> SSL negotiation failed: SSL error: parse tlsext
> -----------------------------------------------
>
> Key: INFRA-2887
> URL: https://issues.apache.org/jira/browse/INFRA-2887
> Project: Infrastructure
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: Subversion
> Reporter: Martijn Dashorst
>
> When I try to import a 4.7MB directory structure (not too many files)
> to the Apache SVN repository using the collabnet SVN client 1.6.11
> (and 1.6.12) I get the following error:
> svn: MKCOL of '/repos/asf/!svn/wrk/c357a0ad-6c6c-4225-bcba-af72cc55b7ee/wicket/common/site/trunk/_site/2009/12/21':
> SSL negotiation failed: SSL error: parse tlsext
> (https://svn.apache.org)
> Things worthy of note:
> - OSX snow leopard
> - both 1.6.11 and 1.6.12 clients from collab.net give the same error
> - I'm based in the EU (Netherlands), so I go through the EU proxy
> I've split up the commit to be able to continue with my work, but did
> want to report this.
> Bypassing the proxy with help from the infra team did not show this
> error, so there is something at work at the svn proxy level.
> This is the output of svn --version:
> svn, version 1.6.12 (r955767)
> compiled Jun 23 2010, 12:01:54
> Copyright (C) 2000-2009 CollabNet.
> Subversion is open source software, see http://subversion.tigris.org/
> This product includes software developed by CollabNet (http://www.Collab.Net/).
> The following repository access (RA) modules are available:
> * ra_neon : Module for accessing a repository via WebDAV protocol using Neon.
> - handles 'http' scheme
> - handles 'https' scheme
> * ra_svn : Module for accessing a repository using the svn network protocol.
> - with Cyrus SASL authentication
> - handles 'svn' scheme
> * ra_local : Module for accessing a repository on local disk.
> - handles 'file' scheme
> * ra_serf : Module for accessing a repository via WebDAV protocol using serf.
> - handles 'http' scheme
> - handles 'https' scheme
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (INFRA-2887) SSL negotiation failed: SSL error:
parse tlsext
Posted by "Emmanuel Lecharny (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/INFRA-2887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12896537#action_12896537 ]
Emmanuel Lecharny commented on INFRA-2887:
------------------------------------------
I have experimented the very same issue last friday. It's intermittent : sometime you get the error, sometime, it works well.
My config is slighty older than Martjin's one :
svn --version
svn, version 1.6.5 (r38866)
compiled Oct 16 2009, 02:54:10
Copyright (C) 2000-2009 CollabNet.
Subversion is open source software, see http://subversion.tigris.org/
This product includes software developed by CollabNet (http://www.Collab.Net/).
The following repository access (RA) modules are available:
* ra_neon : Module for accessing a repository via WebDAV protocol using Neon.
- handles 'http' scheme
- handles 'https' scheme
* ra_svn : Module for accessing a repository using the svn network protocol.
- handles 'svn' scheme
* ra_local : Module for accessing a repository on local disk.
- handles 'file' scheme
Also in Europ (Fr), with a Mac OSx.
I also got this error from time to time :
svn: Commit failed :
svn: The specified baseline is not the latest baseline, so it may not be checked out.
(If I retry, it works...)
> SSL negotiation failed: SSL error: parse tlsext
> -----------------------------------------------
>
> Key: INFRA-2887
> URL: https://issues.apache.org/jira/browse/INFRA-2887
> Project: Infrastructure
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: Subversion
> Reporter: Martijn Dashorst
>
> When I try to import a 4.7MB directory structure (not too many files)
> to the Apache SVN repository using the collabnet SVN client 1.6.11
> (and 1.6.12) I get the following error:
> svn: MKCOL of '/repos/asf/!svn/wrk/c357a0ad-6c6c-4225-bcba-af72cc55b7ee/wicket/common/site/trunk/_site/2009/12/21':
> SSL negotiation failed: SSL error: parse tlsext
> (https://svn.apache.org)
> Things worthy of note:
> - OSX snow leopard
> - both 1.6.11 and 1.6.12 clients from collab.net give the same error
> - I'm based in the EU (Netherlands), so I go through the EU proxy
> I've split up the commit to be able to continue with my work, but did
> want to report this.
> Bypassing the proxy with help from the infra team did not show this
> error, so there is something at work at the svn proxy level.
> This is the output of svn --version:
> svn, version 1.6.12 (r955767)
> compiled Jun 23 2010, 12:01:54
> Copyright (C) 2000-2009 CollabNet.
> Subversion is open source software, see http://subversion.tigris.org/
> This product includes software developed by CollabNet (http://www.Collab.Net/).
> The following repository access (RA) modules are available:
> * ra_neon : Module for accessing a repository via WebDAV protocol using Neon.
> - handles 'http' scheme
> - handles 'https' scheme
> * ra_svn : Module for accessing a repository using the svn network protocol.
> - with Cyrus SASL authentication
> - handles 'svn' scheme
> * ra_local : Module for accessing a repository on local disk.
> - handles 'file' scheme
> * ra_serf : Module for accessing a repository via WebDAV protocol using serf.
> - handles 'http' scheme
> - handles 'https' scheme
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Closed: (INFRA-2887) SSL negotiation failed: SSL error:
parse tlsext
Posted by "Tony Stevenson (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/INFRA-2887?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Tony Stevenson closed INFRA-2887.
---------------------------------
Resolution: Fixed
Can't reproduce this, or see anything in the logs. It is not very likely going to be related to versions of httpd/subversion as we run identical versions on both.
If this happens again, let us know.
> SSL negotiation failed: SSL error: parse tlsext
> -----------------------------------------------
>
> Key: INFRA-2887
> URL: https://issues.apache.org/jira/browse/INFRA-2887
> Project: Infrastructure
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: Subversion
> Reporter: Martijn Dashorst
>
> When I try to import a 4.7MB directory structure (not too many files)
> to the Apache SVN repository using the collabnet SVN client 1.6.11
> (and 1.6.12) I get the following error:
> svn: MKCOL of '/repos/asf/!svn/wrk/c357a0ad-6c6c-4225-bcba-af72cc55b7ee/wicket/common/site/trunk/_site/2009/12/21':
> SSL negotiation failed: SSL error: parse tlsext
> (https://svn.apache.org)
> Things worthy of note:
> - OSX snow leopard
> - both 1.6.11 and 1.6.12 clients from collab.net give the same error
> - I'm based in the EU (Netherlands), so I go through the EU proxy
> I've split up the commit to be able to continue with my work, but did
> want to report this.
> Bypassing the proxy with help from the infra team did not show this
> error, so there is something at work at the svn proxy level.
> This is the output of svn --version:
> svn, version 1.6.12 (r955767)
> compiled Jun 23 2010, 12:01:54
> Copyright (C) 2000-2009 CollabNet.
> Subversion is open source software, see http://subversion.tigris.org/
> This product includes software developed by CollabNet (http://www.Collab.Net/).
> The following repository access (RA) modules are available:
> * ra_neon : Module for accessing a repository via WebDAV protocol using Neon.
> - handles 'http' scheme
> - handles 'https' scheme
> * ra_svn : Module for accessing a repository using the svn network protocol.
> - with Cyrus SASL authentication
> - handles 'svn' scheme
> * ra_local : Module for accessing a repository on local disk.
> - handles 'file' scheme
> * ra_serf : Module for accessing a repository via WebDAV protocol using serf.
> - handles 'http' scheme
> - handles 'https' scheme
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (INFRA-2887) SSL negotiation failed: SSL error:
parse tlsext
Posted by "Martijn Dashorst (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/INFRA-2887?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Martijn Dashorst updated INFRA-2887:
------------------------------------
Summary: SSL negotiation failed: SSL error: parse tlsext (was: SSL negotiation failed: SSL error: parse tlsext Inbox X )
I sent a message to users@subversion and their reply was:
Looks like the ASF should upgrade their server to httpd 2.2.15 and the
latest OpenSSL. This bug has been fixed.
You should report the problem to the ASF infrastructure team.
> SSL negotiation failed: SSL error: parse tlsext
> -----------------------------------------------
>
> Key: INFRA-2887
> URL: https://issues.apache.org/jira/browse/INFRA-2887
> Project: Infrastructure
> Issue Type: Bug
> Security Level: public(Regular issues)
> Components: Subversion
> Reporter: Martijn Dashorst
>
> When I try to import a 4.7MB directory structure (not too many files)
> to the Apache SVN repository using the collabnet SVN client 1.6.11
> (and 1.6.12) I get the following error:
> svn: MKCOL of '/repos/asf/!svn/wrk/c357a0ad-6c6c-4225-bcba-af72cc55b7ee/wicket/common/site/trunk/_site/2009/12/21':
> SSL negotiation failed: SSL error: parse tlsext
> (https://svn.apache.org)
> Things worthy of note:
> - OSX snow leopard
> - both 1.6.11 and 1.6.12 clients from collab.net give the same error
> - I'm based in the EU (Netherlands), so I go through the EU proxy
> I've split up the commit to be able to continue with my work, but did
> want to report this.
> Bypassing the proxy with help from the infra team did not show this
> error, so there is something at work at the svn proxy level.
> This is the output of svn --version:
> svn, version 1.6.12 (r955767)
> compiled Jun 23 2010, 12:01:54
> Copyright (C) 2000-2009 CollabNet.
> Subversion is open source software, see http://subversion.tigris.org/
> This product includes software developed by CollabNet (http://www.Collab.Net/).
> The following repository access (RA) modules are available:
> * ra_neon : Module for accessing a repository via WebDAV protocol using Neon.
> - handles 'http' scheme
> - handles 'https' scheme
> * ra_svn : Module for accessing a repository using the svn network protocol.
> - with Cyrus SASL authentication
> - handles 'svn' scheme
> * ra_local : Module for accessing a repository on local disk.
> - handles 'file' scheme
> * ra_serf : Module for accessing a repository via WebDAV protocol using serf.
> - handles 'http' scheme
> - handles 'https' scheme
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.