Issue with SSL server connection

Get help with all aspects of SABnzbd
Forum rules
Help us help you:
  • Are you using the latest stable version of SABnzbd? Downloads page.
  • Tell us what system you run SABnzbd on.
  • Adhere to the forum rules.
  • Do you experience problems during downloading?
    Check your connection in Status and Interface settings window.
    Use Test Server in Config > Servers.
    We will probably ask you to do a test using only basic settings.
  • Do you experience problems during repair or unpacking?
    Enable +Debug logging in the Status and Interface settings window and share the relevant parts of the log here using [ code ] sections.
Post Reply
simon84
Newbie
Newbie
Posts: 2
Joined: April 15th, 2011, 2:47 pm

Issue with SSL server connection

Post by simon84 »

Hi,

I'm having a little problem here. I'm on Windows XP x64.

2011-04-15 21:25:11,288::INFO::[sabnzbd:1148] SABnzbd.exe-0.6.0RC2 (rev=2803)
2011-04-15 21:25:11,288::INFO::[sabnzbd:1157] Platform=Windows-2003Server-5.2.3790-SP2 Class=nt
2011-04-15 21:25:11,288::INFO::[sabnzbd:1162] Python-version = 2.5.5 (r255:77872, Jan 31 2010, 15:49:35) [MSC v.1310 32 bit (Intel)

I am not able to connect to a server when using SSL over Ethernet (wired) connection (Intel 82567LM).
I tried ports 443 and 563.

I am able to connect to same server without using SSL.

I am able to connect to same server using SSL when using Wi-Fi connection.
I'm also able to connecto to same server without SSL using Wi-Fi.

So the only condition when this server doesn't work is using wired connection and with SSL enabled.

There is also no firewall or similar on my machine or in the network path that would be blocking the connection.

I took two packet captures and I looked at them.
The difference I noticed over the wired connection is that after the Server Hello and certificate packet received from server,
the client sends an additional empty ACK to the server, which in term FIN's the connection and RST's afterwards when client tries to do the key exchange.

Over Wi-Fi this does not happen, the client does not send the empty ACK, but does continue directly with the Client Key Exchange/Change cipher spec. and the connection succeeds and works just fine.

Any ideas how I can crank up logging ? I have already set log_level to 99, but still there is not a single relevant message for the
SSL negotation or from python regarding sockets (blocking/nonblocking?) coming out in the log file.....

Any clues how to further troubleshoot this would be greatly appreciated.

Cheers,

Simon
User avatar
shypike
Administrator
Administrator
Posts: 19773
Joined: January 18th, 2008, 12:49 pm

Re: Issue with SSL server connection

Post by shypike »

Not the answer you want: I don't know.
I never test at this low level, because it always works when I test.
Besides, SABnzbd leaves all of that to the CherryPy framework.
We don't really get complaints about SSL for Windows systems, except some spurious reports that
it stops working after a few hours.
simon84
Newbie
Newbie
Posts: 2
Joined: April 15th, 2011, 2:47 pm

Re: Issue with SSL server connection

Post by simon84 »

Hi !

just to clarify, since you mention cherryPy.

I'm talking about the connection from sabnzbd to the NNTP server at my ISP.
Not talking about the https (GUI) webserver that sabnzbd starts. I'm not even using that. just plain HTTP on localhost.

Any ideas where to look ? how is the NNTP TLS/SSL connection to the server established, is there something like an openssl module in the bundled python ?

Cheers,

Simon
User avatar
shypike
Administrator
Administrator
Posts: 19773
Joined: January 18th, 2008, 12:49 pm

Re: Issue with SSL server connection

Post by shypike »

We use PyOpenSSL (0.10 or 0.11) as intermediary between Python and the OpenSSL libraries.
Post Reply