[ET Trac] [Einstein Toolkit] #2069: connection failures to svn.cactuscode.org

[Einstein Toolkit]

#2069: connection failures to svn.cactuscode.org
--------------------------------------+-------------------------------------
  Reporter:  rhaas                    |       Owner:                     
      Type:  defect                   |      Status:  new                
  Priority:  blocker                  |   Milestone:                     
 Component:  EinsteinToolkit website  |     Version:  development version
Resolution:                           |    Keywords:  SSL                
--------------------------------------+-------------------------------------

Comment (by rhaas):

 Oddly enough: {{{svn.cct.lsu.edu}}} works fine. I would have assumed that
 svn.cactuscode.org and svn.cct.lsu.edu eventually point to the same
 server.

 {{{
 $ openssl s_client -connect svn.cct.lsu.edu:443
 depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST
 Network, CN = USERTrust RSA Certification Authority
 verify return:1
 depth=1 C = US, ST = MI, L = Ann Arbor, O = Internet2, OU = InCommon, CN =
 InCommon RSA Server CA
 verify return:1
 depth=0 C = US, postalCode = 70803, ST = Louisiana, L = Baton Rouge,
 street = 110 Thomas Boyd, O = Louisiana State University, OU = LSU A & M,
 CN = svn.cct.lsu.edu
 verify return:1
 CONNECTED(00000003)
 ---
 Certificate chain
  0 s:/C=US/postalCode=70803/ST=Louisiana/L=Baton Rouge/street=110 Thomas
 Boyd/O=Louisiana State University/OU=LSU A & M/CN=svn.cct.lsu.edu
    i:/C=US/ST=MI/L=Ann Arbor/O=Internet2/OU=InCommon/CN=InCommon RSA
 Server CA
  1 s:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust
 External CA Root
    i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust
 External CA Root
  2 s:/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST
 Network/CN=USERTrust RSA Certification Authority
    i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust
 External CA Root
  3 s:/C=US/ST=MI/L=Ann Arbor/O=Internet2/OU=InCommon/CN=InCommon RSA
 Server CA
    i:/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST
 Network/CN=USERTrust RSA Certification Authority
 ---
 Server certificate
 -----BEGIN CERTIFICATE-----
 MIIGezCCBWOgAwIBAgIRAJMak4/cvvLqoIwOhGVpLSQwDQYJKoZIhvcNAQELBQAw
 djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix
 EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT
 FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMTUwNjA5MDAwMDAwWhcNMTgwNjI1
 MjM1OTU5WjCBtDELMAkGA1UEBhMCVVMxDjAMBgNVBBETBTcwODAzMRIwEAYDVQQI
 EwlMb3Vpc2lhbmExFDASBgNVBAcTC0JhdG9uIFJvdWdlMRgwFgYDVQQJEw8xMTAg
 VGhvbWFzIEJveWQxIzAhBgNVBAoTGkxvdWlzaWFuYSBTdGF0ZSBVbml2ZXJzaXR5
 MRIwEAYDVQQLDAlMU1UgQSAmIE0xGDAWBgNVBAMTD3N2bi5jY3QubHN1LmVkdTCC
 AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANFnkaT5JngRJ6IZhiwTqR87
 JKbSHgK0GtbCZqLj1wD1mSYwctGtncrpNDI/x+wLQxJJ8iNQyBPGXzS4yAQTB0rg
 9pYitDP8MYGtqkJ8b2QNNLlr6nMiRfAAKbDlARGj9gywqYH+wZO5x+H3Y8zR5pRQ
 INiMepwWzYg2BV7H6zHxCcigvvwgRPgWxvzzjubGpH4qMRutdGnnTBEAZKfqL31Z
 KbESFCvaUAugxtRSJ13J7AYIMwwTaL5jGpSah8lbPeU81R/TIW44s18kR3Gn7p62
 1vLrk0iwcvXggAztV2IWjOnkkYtiqiT7ERSjPMV9Ol1N8UcSoD3JsySx9VH2+B3i
 YCxQQc6usijfX6ld5v8rtCZG5pLi8qZUPZ7JmhdPd95nugEgIYtWRe8oaOytljd3
 1SmUJnRcb1qY3sAPKoDSxvLa+ZY5s14tVcsAycJg1rx4HPAnY21abiZZgdPN28KV
 leqaabdxAFKU9/X1Uk1HhUr6dvhvHPZAU3KksGggqPb7HCF8wEffpEeKO7aMN88y
 aXvT0nHPmpyqT4mPQeoWjT3Xdl1oKFvuEIjubQ1F7TMtBKz5qdJgHiojE3KYwP9d
 7lBA2MKjrmVsKx6boLgmXfXnZjK3Y2LCffpLYgEtm255SJ95HSQEGF8ePLjuElh2
 xafrF8fDwFA3v2glePoJAgMBAAGjggHDMIIBvzAfBgNVHSMEGDAWgBQeBaN3j2yW
 4luHS6a0hqxxAAznODAdBgNVHQ4EFgQUVvsvJpMnqcAQsrGqPZdkrNR4SoowDgYD
 VR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
 CCsGAQUFBwMCMGcGA1UdIARgMF4wUgYMKwYBBAGuIwEEAwEBMEIwQAYIKwYBBQUH
 AgEWNGh0dHBzOi8vd3d3LmluY29tbW9uLm9yZy9jZXJ0L3JlcG9zaXRvcnkvY3Bz
 X3NzbC5wZGYwCAYGZ4EMAQICMEQGA1UdHwQ9MDswOaA3oDWGM2h0dHA6Ly9jcmwu
 aW5jb21tb24tcnNhLm9yZy9JbkNvbW1vblJTQVNlcnZlckNBLmNybDB1BggrBgEF
 BQcBAQRpMGcwPgYIKwYBBQUHMAKGMmh0dHA6Ly9jcnQudXNlcnRydXN0LmNvbS9J
 bkNvbW1vblJTQVNlcnZlckNBXzIuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2Nz
 cC51c2VydHJ1c3QuY29tMBoGA1UdEQQTMBGCD3N2bi5jY3QubHN1LmVkdTANBgkq
 hkiG9w0BAQsFAAOCAQEAmy0H1GJ4o/8EJf/r9K53SySwgCNiXAFkWEMxwzDif01q
 QoLuNEGw9Wl8qLYIaLkVZSWL9iuqLfCUxk0Kyn6O+M6IkHXmIaQ+29yWAD00u+5n
 T6b1kln6bDOm0lQsiHqg8YXRbg8rAqe7u0VC7x1WGF/ib+BA+rqCfTOtbd5tXy1w
 OFCljplQGdJEgpCidMNxBPjOzadiE6GdTo4/jHvndERtm8sSAF7r8MVxVRwqOHkz
 NHvB72hkna51ChwOm4dOHOEC+wTm1OxNyqCLJ0L++YrHD77IECaIJz3KV+kRNMuW
 tWLY8FU4KGko0oGGRYTmcTYjae7E2vObo1KNjRPvvw==
 -----END CERTIFICATE-----
 subject=/C=US/postalCode=70803/ST=Louisiana/L=Baton Rouge/street=110
 Thomas Boyd/O=Louisiana State University/OU=LSU A & M/CN=svn.cct.lsu.edu
 issuer=/C=US/ST=MI/L=Ann Arbor/O=Internet2/OU=InCommon/CN=InCommon RSA
 Server CA
 ---
 No client certificate CA names sent
 ---
 SSL handshake has read 6030 bytes and written 750 bytes
 Verification: OK
 ---
 New, TLSv1.2, Cipher is AES128-GCM-SHA256
 Server public key is 4096 bit
 Secure Renegotiation IS supported
 Compression: NONE
 Expansion: NONE
 No ALPN negotiated
 SSL-Session:
     Protocol  : TLSv1.2
     Cipher    : AES128-GCM-SHA256
     Session-ID:
 1B0AAEDAEB06597622A980F48AE8E15F87BB43306C0D26E38D208AB507525F6C
     Session-ID-ctx:
     Master-Key:
 AB6584F77DE40B391759B6E26B6320F61A77B41E22DFFA005E9146D4BEBEA5FCC692773C13F3ECC09F27394C279689FB
     PSK identity: None
     PSK identity hint: None
     SRP username: None
     TLS session ticket lifetime hint: 300 (seconds)
     TLS session ticket:
     0000 - 8a 93 fa 3c 8f ab f1 6b-db 99 81 e4 7b aa 49 75
 ...<...k....{.Iu
     0010 - 4a 7d ce d3 4e af da e1-53 71 82 d0 e0 a0 a5 3b
 J}..N...Sq.....;
     0020 - bf f1 14 07 3a f9 58 75-f7 e3 94 2d 5b 77 c6 a9
 ....:.Xu...-[w..
     0030 - ec 19 d5 79 5c 99 ed 6c-c1 7e c8 55 ba 5c 84 23
 ...y\..l.~.U.\.#
     0040 - 47 0b fa bc 8b 1d bb a9-3d 90 d7 91 c8 0c 0a 80
 G.......=.......
     0050 - 26 05 f7 97 96 58 69 25-a0 ef 77 82 12 00 d4 35
 &....Xi%..w....5
     0060 - 7a c4 9a 9c 46 f6 fd 9a-ce cf e6 29 91 d9 f1 fb
 z...F......)....
     0070 - 45 ce b9 fd 38 e6 05 f6-f3 11 1a 1c 59 a0 a5 dd
 E...8.......Y...
     0080 - f4 26 5c f6 65 b8 1e 4c-7c f0 43 3f 19 15 67 95
 .&\.e..L|.C?..g.
     0090 - cd fa e6 a1 41 64 9a a7-e1 b9 5e 97 d4 78 66 ee
 ....Ad....^..xf.
     00a0 - d1 0e 58 61 55 e8 a5 d7-8b 23 3d cd cf f6 f5 78
 ..XaU....#=....x
     00b0 - b2 9d 92 bb 16 c4 de 47-f8 eb e2 60 4c b0 e4 82
 .......G...`L...

     Start Time: 1503956011
     Timeout   : 7200 (sec)
     Verify return code: 0 (ok)
     Extended master secret: no
 ---
 DONE
 }}}

-- 
Ticket URL: <https://trac.einsteintoolkit.org/ticket/2069#comment:1>
Einstein Toolkit <http://einsteintoolkit.org>
The Einstein Toolkit