Ubuntu
openssl package

SSL routines:SSL23_GET_SERVER_HELLO:unsupported protocol

Bug #966058 reported by John Lenton on 2012-03-27

This bug report is a duplicate of: Bug #986147: openssl 1.0.1-4ubuntu2 breaks a bunch of ciphers. Edit Remove

This bug affects 5 people

Affects		Status	Importance	Assigned to	Milestone
	openssl (Ubuntu)	Confirmed	Undecided	Unassigned

Bug Description

When trying to access some sites over https, both python and perl in precise fall over.
Here's what happens with libwww-perl's GET:
$ GET "https://one.ubuntu.com/" | head -n1
<!DOCTYPE html>
$ GET "https://api.dailymotion.com/user/SFLTV/features?fields=url,thumbnail_small_url,title,description&limit=100&page=1"
Can't connect to api.dailymotion.com:443

LWP::Protocol::https::Socket: SSL connect attempt failed with unknown errorerror:14077102:SSL routines:SSL23_GET_SERVER_HELLO:unsupported protocol at /usr/share/perl5/LWP/Protocol/http.pm line 51.

Python throws essentially the same error. These work in lucid, and were working in precise, until very recently.

Tags:

Revision history for this message

Ubuntu Foundations Team Bug Bot (crichton) wrote on 2012-03-27:

Thank you for taking the time to report this bug and helping to make Ubuntu better. It seems that your bug report is not filed about a specific source package though, rather it is just filed against Ubuntu in general. It is important that bug reports be filed about source packages so that people interested in the package can find the bugs about it. You can find some hints about determining what package your bug might be about at https://wiki.ubuntu.com/Bugs/FindRightPackage. You might also ask for help in the #ubuntu-bugs irc channel on Freenode.

To change the source package that this bug is filed about visit https://bugs.launchpad.net/ubuntu/+bug/966058/+editstatus and add the package name in the text box next to the word Package.

[This is an automated message. I apologize if it reached you inappropriately; please just reply to this message indicating so.]

tags:

added: bot-comment

Revision history for this message

graingert (tagrain) wrote on 2012-03-29:

$ GET "https://browserid.org/ver.txt"
Can't connect to browserid.org:443
LWP::-Protocol::https::-Socket: SSL connect attempt failed with unknown errorerror:14077102:-SSL routines:-SSL23_GET_SERVER_HELLO:unsupported protocol at /usr/share/perl5/LWP/Protocol/http.pm line 51.

is this a duplicate of bug 861137

affects:

ubuntu → openssl (Ubuntu)

Revision history for this message

graingert (tagrain) wrote on 2012-03-29:

ubuntu 12.04

I don't get this issue in wget, curl or openssl

But I do get this issue in python and GET

import requests
requests.post("https://browserid.org/verify", data={})
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "/usr/local/lib/python2.7/dist-packages/requests/api.py", line 84, in post
    return request('post', url, data=data, **kwargs)
  File "/usr/local/lib/python2.7/dist-packages/requests/api.py", line 39, in request
    return s.request(method=method, url=url, **kwargs)
  File "/usr/local/lib/python2.7/dist-packages/requests/sessions.py", line 203, in request
    r.send(prefetch=prefetch)
  File "/usr/local/lib/python2.7/dist-packages/requests/models.py", line 557, in send
    raise SSLError(e)
requests.exceptions.SSLError: [Errno 1] _ssl.c:504: error:14077102:SSL routines:SSL23_GET_SERVER_HELLO:unsupported protocol

Revision history for this message

Shane Tomlinson (stomlinson-r) wrote on 2012-03-30:

ssldump output of curl https://browserid.org Edit (3.7 KiB, text/plain)

I am attaching two files to add more information to this bug. I used ssldump to capture the handshake between the client machine and https://browserid.org to see where there were differences. I am using Ubuntu 12.04 32bit.

The file named curl_capture.txt is captured from a curl https://browserid.org
The file named GET_capture.txt is captured from GET https://browserid.org

Revision history for this message

Shane Tomlinson (stomlinson-r) wrote on 2012-03-30:

ssldump output of GET https://browserid.org Edit (3.0 KiB, text/plain)

Revision history for this message

Launchpad Janitor (janitor) wrote on 2012-03-30:

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in openssl (Ubuntu):
status:	New → Confirmed

Philip Muškovac (yofel) on 2012-03-30

tags:

added: precise regression-release

Revision history for this message

Cerin (chrisspen) wrote on 2012-06-25:

I'm not sure if it's related, but I get the similar error:

urllib2.URLError: <urlopen error [Errno 1] _ssl.c:504: error:140773E8:SSL routines:SSL23_GET_SERVER_HELLO:reason(1000)>

My case may be related be related to http://bugs.python.org/issue11220, but the suggested fix of using a custom opener to switch to SSLv3 only results in the error httplib.BadStatusLine: ''.

I'm using Python 2.7.3 on Ubuntu 12.04.