bzr does not send SNI

Bug #1089643 reported by Pierre Rudloff
This bug report is a duplicate of:  Bug #1089352: bzr branch does not support SNI. Edit Remove
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Bazaar
Confirmed
Medium
Unassigned

Bug Description

It seems that bzr does not send a Server Name Indication with HTTPS requests so it does not work with hosts that have several different certificates on the same IP:
pierre@pierre-MacBook:~/Bureau/test$ bzr pull https://svn.strasweb.fr/strasweb/chaton-cms/
bzr: ERROR: Certificate error: hostname 'svn.strasweb.fr' doesn't match either of 'www2.strasweb.fr', 'strasweb.fr'

ProblemType: Bug
DistroRelease: Ubuntu 12.10
Package: bzr 2.6.0~beta2-0ubuntu1
ProcVersionSignature: Ubuntu 3.5.0-19.30-generic 3.5.7
Uname: Linux 3.5.0-19-generic i686
ApportVersion: 2.6.1-0ubuntu6
Architecture: i386
Date: Wed Dec 12 22:27:48 2012
MarkForUpload: True
PackageArchitecture: all
SourcePackage: bzr
UpgradeStatus: Upgraded to quantal on 2012-10-25 (48 days ago)

Revision history for this message
Pierre Rudloff (rudloff) wrote :
Revision history for this message
Vincent Ladeuil (vila) wrote :

> bzr: ERROR: Certificate error: hostname 'svn.strasweb.fr' doesn't match either of 'www2.strasweb.fr', 'strasweb.fr'

It looks like bzr is trying the strasweb.fr certificate instead of the svn.strasweb.fr.

Can you try 'bzr pull -Dhttp' and attach the relevant part of your Bazaar log file ('bzr version' will tell you where it's located). There shouldn't be any sensitive data in there but have a look and anonymize as you see fit. What we need to see if which host is contacted when which '-Dhttp' should telll us.

affects: bzr (Ubuntu) → bzr
Changed in bzr:
status: New → Incomplete
Revision history for this message
Pierre Rudloff (rudloff) wrote :
Download full text (4.6 KiB)

dim. 2012-12-16 00:22:40 +0100
0.064 bazaar version: 2.6b2
0.065 bzr arguments: [u'pull', u'-Dhttp', u'https://svn.strasweb.fr/strasweb/chaton-cms/']
0.069 looking for plugins in /home/pierre/.bazaar/plugins
0.070 looking for plugins in /usr/lib/python2.7/dist-packages/bzrlib/plugins
0.093 Deprecated function called
Called from:
  File "/usr/lib/python2.7/dist-packages/bzrlib/plugin.py", line 382, in _load_plugin_module
    exec "import bzrlib.plugins.%s" % name in {}
  File "<string>", line 1, in <module>
  File "/usr/lib/python2.7/dist-packages/bzrlib/plugins/svn/__init__.py", line 406, in <module>
    "bzrlib.plugins.svn.keywords", "create_svn_keywords_filter")
  File "/usr/lib/python2.7/dist-packages/bzrlib/symbol_versioning.py", line 100, in decorated_function
    trace.mutter_callsite(4, "Deprecated function called")
0.102 encoding stdout as sys.stdout encoding 'UTF-8'
0.129 opening working tree '/home/pierre/Bureau/test'
0.454 * About to connect() to svn.strasweb.fr:443
0.671 * About to connect() to svn.strasweb.fr:443
0.821 Transferred: 0kB (0.0kB/s r:0kB w:0kB)
0.978 Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/bzrlib/commands.py", line 930, in exception_to_return_code
    return the_callable(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/bzrlib/commands.py", line 1141, in run_bzr
    ret = run(*run_argv)
  File "/usr/lib/python2.7/dist-packages/bzrlib/commands.py", line 673, in run_argv_aliases
    return self.run(**all_cmd_args)
  File "/usr/lib/python2.7/dist-packages/bzrlib/commands.py", line 697, in run
    return self._operation.run_simple(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/bzrlib/cleanup.py", line 136, in run_simple
    self.cleanups, self.func, *args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/bzrlib/cleanup.py", line 166, in _do_with_cleanups
    result = func(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/bzrlib/builtins.py", line 1225, in run
    possible_transports=possible_transports)
  File "/usr/lib/python2.7/dist-packages/bzrlib/branch.py", line 185, in open
    possible_transports=possible_transports, _unsupported=_unsupported)
  File "/usr/lib/python2.7/dist-packages/bzrlib/controldir.py", line 689, in open
    _unsupported=_unsupported)
  File "/usr/lib/python2.7/dist-packages/bzrlib/controldir.py", line 718, in open_from_transport
    find_format, transport, redirected)
  File "/usr/lib/python2.7/dist-packages/bzrlib/transport/__init__.py", line 1719, in do_catching_redirections
    return action(transport)
  File "/usr/lib/python2.7/dist-packages/bzrlib/controldir.py", line 706, in find_format
    probers=probers)
  File "/usr/lib/python2.7/dist-packages/bzrlib/controldir.py", line 1151, in find_format
    return prober.probe_transport(transport)
  File "/usr/lib/python2.7/dist-packages/bzrlib/plugins/svn/__init__.py", line 282, in probe_transport
    dav_entries = dav_options(transport, url)
  File "/usr/lib/python2.7/dist-packages/bzrlib/plugins/svn/__init__.py", line 192, in dav_options
    resp = transport._perform(req)
  File "/usr/lib/python2.7/dist-packages/bzrlib/transport/http/_urllib.py", line 76, in _perform
...

Read more...

Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for Bazaar because there has been no activity for 60 days.]

Changed in bzr:
status: Incomplete → Expired
Pierre Rudloff (rudloff)
Changed in bzr:
status: Expired → New
Martin Packman (gz)
Changed in bzr:
importance: Undecided → Medium
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.