Activity log for bug #1081144

Date Who What changed Old value New value Message
2012-11-20 14:42:02 Roman Yepishev bug added bug
2012-11-20 14:43:08 Roman Yepishev attachment added auth_error.png https://bugs.launchpad.net/ubuntuone-client/+bug/1081144/+attachment/3439510/+files/auth_error.png
2012-11-20 14:43:19 Roman Yepishev tags u1-support
2012-11-20 15:55:08 Roman Yepishev description At the moment ubuntuone-preferences shows an error message: Authorization Error [Errno socket error] SSL hostname validation failed At the moment ubuntuone-preferences shows an error message: Authorization Error [Errno socket error] SSL hostname validation failed This is happening because ubuntuone.com (which is referenced from lucid clients) has subject field of SSL certificate set to *.ubuntuone.com and the monkey-patched SSL verification checks for subject field only. ubuntuone.com is present in subjectAltName but it is not being checked.
2012-11-20 21:11:15 Roman Yepishev bug task added ubuntuone-client (Ubuntu)
2012-11-20 21:11:26 Roman Yepishev nominated for series Ubuntu Lucid
2012-11-20 21:29:48 Roman Yepishev attachment added CVE-2011-4409.patch https://bugs.launchpad.net/ubuntu/+source/ubuntuone-client/+bug/1081144/+attachment/3439849/+files/CVE-2011-4409.patch
2012-11-20 21:30:10 Roman Yepishev ubuntuone-client (Ubuntu): assignee Ubuntu One Client Engineering team (ubuntuone-client-engineering)
2012-11-20 21:30:14 Roman Yepishev ubuntuone-client (Ubuntu): status New Confirmed
2012-11-20 21:30:21 Roman Yepishev ubuntuone-client (Ubuntu): importance Undecided Medium
2012-11-21 00:18:44 Ubuntu Foundations Team Bug Bot tags u1-support patch u1-support
2012-11-21 00:18:53 Ubuntu Foundations Team Bug Bot bug added subscriber Ubuntu Review Team
2012-11-21 00:18:55 Ubuntu Foundations Team Bug Bot cve linked 2011-4409
2012-11-21 15:14:18 Roman Yepishev description At the moment ubuntuone-preferences shows an error message: Authorization Error [Errno socket error] SSL hostname validation failed This is happening because ubuntuone.com (which is referenced from lucid clients) has subject field of SSL certificate set to *.ubuntuone.com and the monkey-patched SSL verification checks for subject field only. ubuntuone.com is present in subjectAltName but it is not being checked. New lucid accounts cannot register. At the moment ubuntuone-preferences shows an error message: Authorization Error [Errno socket error] SSL hostname validation failed This is happening because ubuntuone.com (which is referenced from lucid clients) has subject field of SSL certificate set to *.ubuntuone.com and the monkey-patched SSL verification checks for subject field only. ubuntuone.com is present in subjectAltName but it is not being checked. WORKAROUND: Replace /etc/xdg/ubuntuone/oauth_urls
2012-11-21 15:17:44 Roman Yepishev attachment added oauth_urls https://bugs.launchpad.net/ubuntuone-client/+bug/1081144/+attachment/3440368/+files/oauth_urls
2012-11-22 00:49:04 Roman Yepishev description New lucid accounts cannot register. At the moment ubuntuone-preferences shows an error message: Authorization Error [Errno socket error] SSL hostname validation failed This is happening because ubuntuone.com (which is referenced from lucid clients) has subject field of SSL certificate set to *.ubuntuone.com and the monkey-patched SSL verification checks for subject field only. ubuntuone.com is present in subjectAltName but it is not being checked. WORKAROUND: Replace /etc/xdg/ubuntuone/oauth_urls New lucid accounts cannot register or add a new machine. At the moment ubuntuone-preferences shows an error message: Authorization Error [Errno socket error] SSL hostname validation failed This is happening because ubuntuone.com (which is referenced from lucid clients) has subject field of SSL certificate set to *.ubuntuone.com and the monkey-patched SSL verification checks for subject field only. ubuntuone.com is present in subjectAltName but it is not being checked. WORKAROUND: Replace /etc/xdg/ubuntuone/oauth_urls with https://bugs.launchpad.net/ubuntuone-client/+bug/1081144/+attachment/3440368/+files/oauth_urls
2012-11-22 08:59:26 Roman Yepishev description New lucid accounts cannot register or add a new machine. At the moment ubuntuone-preferences shows an error message: Authorization Error [Errno socket error] SSL hostname validation failed This is happening because ubuntuone.com (which is referenced from lucid clients) has subject field of SSL certificate set to *.ubuntuone.com and the monkey-patched SSL verification checks for subject field only. ubuntuone.com is present in subjectAltName but it is not being checked. WORKAROUND: Replace /etc/xdg/ubuntuone/oauth_urls with https://bugs.launchpad.net/ubuntuone-client/+bug/1081144/+attachment/3440368/+files/oauth_urls New lucid accounts cannot register or add a new machine. At the moment ubuntuone-preferences shows an error message: Authorization Error [Errno socket error] SSL hostname validation failed This is happening because ubuntuone.com (which is referenced from lucid clients) has subject field of SSL certificate set to *.ubuntuone.com and the monkey-patched SSL verification checks for subject field only. ubuntuone.com is present in subjectAltName but it is not being checked. WORKAROUND: 1. Download oauth_urls file from launchpad: https://bugs.launchpad.net/ubuntuone-client/+bug/1081144/+attachment/3440368/+files/oauth_urls 2. Put the file e.g. in /tmp folder 3. Open terminal (Alt+F2, gnome-terminal or Ctrl+Alt+T in default GNOME environment) 3. Run the following: $ sudo cp /tmp/oauth_urls /etc/xdg/ubuntuone This will prompt you for a password to your account. 5. Run the following to shut down existing ubuntuone-login process that has cached old configuration: $ pkill ubuntuone-login 6. Start ubuntuone-preferences again.
2012-11-30 14:20:46 Roman Yepishev description New lucid accounts cannot register or add a new machine. At the moment ubuntuone-preferences shows an error message: Authorization Error [Errno socket error] SSL hostname validation failed This is happening because ubuntuone.com (which is referenced from lucid clients) has subject field of SSL certificate set to *.ubuntuone.com and the monkey-patched SSL verification checks for subject field only. ubuntuone.com is present in subjectAltName but it is not being checked. WORKAROUND: 1. Download oauth_urls file from launchpad: https://bugs.launchpad.net/ubuntuone-client/+bug/1081144/+attachment/3440368/+files/oauth_urls 2. Put the file e.g. in /tmp folder 3. Open terminal (Alt+F2, gnome-terminal or Ctrl+Alt+T in default GNOME environment) 3. Run the following: $ sudo cp /tmp/oauth_urls /etc/xdg/ubuntuone This will prompt you for a password to your account. 5. Run the following to shut down existing ubuntuone-login process that has cached old configuration: $ pkill ubuntuone-login 6. Start ubuntuone-preferences again. New lucid accounts cannot register or add a new machine. At the moment ubuntuone-preferences shows an error message: Authorization Error [Errno socket error] SSL hostname validation failed This is happening because ubuntuone.com (which is referenced from lucid clients) has subject field of SSL certificate set to *.ubuntuone.com and the monkey-patched SSL verification checks for subject field only. ubuntuone.com is present in subjectAltName but it is not being checked. FIXED by changing the certificate on the server side.
2012-11-30 14:21:43 Roman Yepishev ubuntuone-client (Ubuntu): status Confirmed Won't Fix
2012-11-30 14:22:34 Roman Yepishev ubuntuone-client: status New Won't Fix