Page 1 of 1

Issue with SSL server connection

Posted: April 15th, 2011, 3:27 pm
by simon84
Hi,

I'm having a little problem here. I'm on Windows XP x64.

2011-04-15 21:25:11,288::INFO::[sabnzbd:1148] SABnzbd.exe-0.6.0RC2 (rev=2803)
2011-04-15 21:25:11,288::INFO::[sabnzbd:1157] Platform=Windows-2003Server-5.2.3790-SP2 Class=nt
2011-04-15 21:25:11,288::INFO::[sabnzbd:1162] Python-version = 2.5.5 (r255:77872, Jan 31 2010, 15:49:35) [MSC v.1310 32 bit (Intel)

I am not able to connect to a server when using SSL over Ethernet (wired) connection (Intel 82567LM).
I tried ports 443 and 563.

I am able to connect to same server without using SSL.

I am able to connect to same server using SSL when using Wi-Fi connection.
I'm also able to connecto to same server without SSL using Wi-Fi.

So the only condition when this server doesn't work is using wired connection and with SSL enabled.

There is also no firewall or similar on my machine or in the network path that would be blocking the connection.

I took two packet captures and I looked at them.
The difference I noticed over the wired connection is that after the Server Hello and certificate packet received from server,
the client sends an additional empty ACK to the server, which in term FIN's the connection and RST's afterwards when client tries to do the key exchange.

Over Wi-Fi this does not happen, the client does not send the empty ACK, but does continue directly with the Client Key Exchange/Change cipher spec. and the connection succeeds and works just fine.

Any ideas how I can crank up logging ? I have already set log_level to 99, but still there is not a single relevant message for the
SSL negotation or from python regarding sockets (blocking/nonblocking?) coming out in the log file.....

Any clues how to further troubleshoot this would be greatly appreciated.

Cheers,

Simon

Re: Issue with SSL server connection

Posted: April 15th, 2011, 4:18 pm
by shypike
Not the answer you want: I don't know.
I never test at this low level, because it always works when I test.
Besides, SABnzbd leaves all of that to the CherryPy framework.
We don't really get complaints about SSL for Windows systems, except some spurious reports that
it stops working after a few hours.

Re: Issue with SSL server connection

Posted: April 16th, 2011, 4:17 pm
by simon84
Hi !

just to clarify, since you mention cherryPy.

I'm talking about the connection from sabnzbd to the NNTP server at my ISP.
Not talking about the https (GUI) webserver that sabnzbd starts. I'm not even using that. just plain HTTP on localhost.

Any ideas where to look ? how is the NNTP TLS/SSL connection to the server established, is there something like an openssl module in the bundled python ?

Cheers,

Simon

Re: Issue with SSL server connection

Posted: April 18th, 2011, 4:48 am
by shypike
We use PyOpenSSL (0.10 or 0.11) as intermediary between Python and the OpenSSL libraries.