Administrace komentářů

Hebne TLS:

$ openssl s_client -connect www.abclinuxu.cz:443 -debug -msg -state 
CONNECTED(00000003)
SSL_connect:before/connect initialization
write to 0x84ce718 [0x84cf108] (142 bytes => 142 (0x8E))
0000 - 80 8c 01 03 01 00 63 00-00 00 20 00 00 39 00 00   ......c... ..9..
0010 - 38 00 00 35 00 00 88 00-00 87 00 00 84 00 00 16   8..5............
0020 - 00 00 13 00 00 0a 07 00-c0 00 00 33 00 00 32 00   ...........3..2.
0030 - 00 2f 00 00 45 00 00 44-00 00 41 00 00 07 05 00   ./..E..D..A.....
0040 - 80 03 00 80 00 00 05 00-00 04 01 00 80 00 00 15   ................
0050 - 00 00 12 00 00 09 06 00-40 00 00 14 00 00 11 00   ........@.......
0060 - 00 08 00 00 06 04 00 80-00 00 03 02 00 80 5f 74   .............._t
0070 - 8a a9 89 c4 62 7c 07 45-ff d3 97 1f fa 7b d3 67   ....b|.E.....{.g
0080 - 73 0b 04 8a df 3d a1 a6-94 19 cd 15 4b fb         s....=......K.
>>> SSL 2.0 [length 008c], CLIENT-HELLO
    01 03 01 00 63 00 00 00 20 00 00 39 00 00 38 00
    00 35 00 00 88 00 00 87 00 00 84 00 00 16 00 00
    13 00 00 0a 07 00 c0 00 00 33 00 00 32 00 00 2f
    00 00 45 00 00 44 00 00 41 00 00 07 05 00 80 03
    00 80 00 00 05 00 00 04 01 00 80 00 00 15 00 00
    12 00 00 09 06 00 40 00 00 14 00 00 11 00 00 08
    00 00 06 04 00 80 00 00 03 02 00 80 5f 74 8a a9
    89 c4 62 7c 07 45 ff d3 97 1f fa 7b d3 67 73 0b
    04 8a df 3d a1 a6 94 19 cd 15 4b fb
SSL_connect:SSLv2/v3 write client hello A
read from 0x84ce718 [0x84d4668] (7 bytes => 0 (0x0))
31925:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

protože read from 0x84ce718 [0x84d4668] (7 bytes => 0 (0x0)).

A skutečně od serveru dostanu jen sedm bajtů:

socket(PF_INET, SOCK_STREAM, IPPROTO_TCP) = 3
setsockopt(3, SOL_SOCKET, SO_KEEPALIVE, [0], 4) = 0
connect(3, {sa_family=AF_INET, sin_port=htons(443), sin_addr=inet_addr("195.70.150.7")}, 16) = 0
fstat64(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 10), ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7e8b000
write(1, "CONNECTED(00000003)\n"..., 20CONNECTED(00000003)
) = 20
select(4, [3], [3], NULL, NULL)         = 1 (out [3])
time(NULL)                              = 1250449668
brk(0x87d3000)                          = 0x87d3000
time(NULL)                              = 1250449668
write(3, "\200\214\1\3\1\0c\0\0\0 \0\0009\0\0008\0\0005\0\0\210\0\0\207\0\0\204\0\0\26\0"..., 142) = 142
read(3, ""..., 7)                       = 0
write(2, "514:error:140790E5:SSL routines:S"..., 81514:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:
) = 81
shutdown(3, 0 /* receive */)            = 0
close(3)                                = 0
brk(0x87c5000)                          = 0x87c5000
exit_group(0)                           = ?

Nicméně někdy dostanu i EOF.

Někdy se TLS ustanovní, někdy ne, obvykle se tak děje v krátkých řadách.

Vypadá to, že tam je nějaký load balancer, který mě občas pošle na stroj, který má rozbité TLS.

Chybu pozoruji od sobotního (2009-08-15) odpoledne.