#2069: connection failures to svn.cactuscode.org --------------------------------------+------------------------------------- Reporter: rhaas | Owner: Type: defect | Status: new Priority: blocker | Milestone: Component: EinsteinToolkit website | Version: development version Resolution: | Keywords: SSL --------------------------------------+-------------------------------------
Comment (by rhaas):
Oddly enough: {{{svn.cct.lsu.edu}}} works fine. I would have assumed that svn.cactuscode.org and svn.cct.lsu.edu eventually point to the same server.
{{{ $ openssl s_client -connect svn.cct.lsu.edu:443 depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority verify return:1 depth=1 C = US, ST = MI, L = Ann Arbor, O = Internet2, OU = InCommon, CN = InCommon RSA Server CA verify return:1 depth=0 C = US, postalCode = 70803, ST = Louisiana, L = Baton Rouge, street = 110 Thomas Boyd, O = Louisiana State University, OU = LSU A & M, CN = svn.cct.lsu.edu verify return:1 CONNECTED(00000003) --- Certificate chain 0 s:/C=US/postalCode=70803/ST=Louisiana/L=Baton Rouge/street=110 Thomas Boyd/O=Louisiana State University/OU=LSU A & M/CN=svn.cct.lsu.edu i:/C=US/ST=MI/L=Ann Arbor/O=Internet2/OU=InCommon/CN=InCommon RSA Server CA 1 s:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root 2 s:/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust RSA Certification Authority i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root 3 s:/C=US/ST=MI/L=Ann Arbor/O=Internet2/OU=InCommon/CN=InCommon RSA Server CA i:/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust RSA Certification Authority --- Server certificate -----BEGIN CERTIFICATE----- MIIGezCCBWOgAwIBAgIRAJMak4/cvvLqoIwOhGVpLSQwDQYJKoZIhvcNAQELBQAw djELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1JMRIwEAYDVQQHEwlBbm4gQXJib3Ix EjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xHzAdBgNVBAMT FkluQ29tbW9uIFJTQSBTZXJ2ZXIgQ0EwHhcNMTUwNjA5MDAwMDAwWhcNMTgwNjI1 MjM1OTU5WjCBtDELMAkGA1UEBhMCVVMxDjAMBgNVBBETBTcwODAzMRIwEAYDVQQI EwlMb3Vpc2lhbmExFDASBgNVBAcTC0JhdG9uIFJvdWdlMRgwFgYDVQQJEw8xMTAg VGhvbWFzIEJveWQxIzAhBgNVBAoTGkxvdWlzaWFuYSBTdGF0ZSBVbml2ZXJzaXR5 MRIwEAYDVQQLDAlMU1UgQSAmIE0xGDAWBgNVBAMTD3N2bi5jY3QubHN1LmVkdTCC AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANFnkaT5JngRJ6IZhiwTqR87 JKbSHgK0GtbCZqLj1wD1mSYwctGtncrpNDI/x+wLQxJJ8iNQyBPGXzS4yAQTB0rg 9pYitDP8MYGtqkJ8b2QNNLlr6nMiRfAAKbDlARGj9gywqYH+wZO5x+H3Y8zR5pRQ INiMepwWzYg2BV7H6zHxCcigvvwgRPgWxvzzjubGpH4qMRutdGnnTBEAZKfqL31Z KbESFCvaUAugxtRSJ13J7AYIMwwTaL5jGpSah8lbPeU81R/TIW44s18kR3Gn7p62 1vLrk0iwcvXggAztV2IWjOnkkYtiqiT7ERSjPMV9Ol1N8UcSoD3JsySx9VH2+B3i YCxQQc6usijfX6ld5v8rtCZG5pLi8qZUPZ7JmhdPd95nugEgIYtWRe8oaOytljd3 1SmUJnRcb1qY3sAPKoDSxvLa+ZY5s14tVcsAycJg1rx4HPAnY21abiZZgdPN28KV leqaabdxAFKU9/X1Uk1HhUr6dvhvHPZAU3KksGggqPb7HCF8wEffpEeKO7aMN88y aXvT0nHPmpyqT4mPQeoWjT3Xdl1oKFvuEIjubQ1F7TMtBKz5qdJgHiojE3KYwP9d 7lBA2MKjrmVsKx6boLgmXfXnZjK3Y2LCffpLYgEtm255SJ95HSQEGF8ePLjuElh2 xafrF8fDwFA3v2glePoJAgMBAAGjggHDMIIBvzAfBgNVHSMEGDAWgBQeBaN3j2yW 4luHS6a0hqxxAAznODAdBgNVHQ4EFgQUVvsvJpMnqcAQsrGqPZdkrNR4SoowDgYD VR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMGcGA1UdIARgMF4wUgYMKwYBBAGuIwEEAwEBMEIwQAYIKwYBBQUH AgEWNGh0dHBzOi8vd3d3LmluY29tbW9uLm9yZy9jZXJ0L3JlcG9zaXRvcnkvY3Bz X3NzbC5wZGYwCAYGZ4EMAQICMEQGA1UdHwQ9MDswOaA3oDWGM2h0dHA6Ly9jcmwu aW5jb21tb24tcnNhLm9yZy9JbkNvbW1vblJTQVNlcnZlckNBLmNybDB1BggrBgEF BQcBAQRpMGcwPgYIKwYBBQUHMAKGMmh0dHA6Ly9jcnQudXNlcnRydXN0LmNvbS9J bkNvbW1vblJTQVNlcnZlckNBXzIuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2Nz cC51c2VydHJ1c3QuY29tMBoGA1UdEQQTMBGCD3N2bi5jY3QubHN1LmVkdTANBgkq hkiG9w0BAQsFAAOCAQEAmy0H1GJ4o/8EJf/r9K53SySwgCNiXAFkWEMxwzDif01q QoLuNEGw9Wl8qLYIaLkVZSWL9iuqLfCUxk0Kyn6O+M6IkHXmIaQ+29yWAD00u+5n T6b1kln6bDOm0lQsiHqg8YXRbg8rAqe7u0VC7x1WGF/ib+BA+rqCfTOtbd5tXy1w OFCljplQGdJEgpCidMNxBPjOzadiE6GdTo4/jHvndERtm8sSAF7r8MVxVRwqOHkz NHvB72hkna51ChwOm4dOHOEC+wTm1OxNyqCLJ0L++YrHD77IECaIJz3KV+kRNMuW tWLY8FU4KGko0oGGRYTmcTYjae7E2vObo1KNjRPvvw== -----END CERTIFICATE----- subject=/C=US/postalCode=70803/ST=Louisiana/L=Baton Rouge/street=110 Thomas Boyd/O=Louisiana State University/OU=LSU A & M/CN=svn.cct.lsu.edu issuer=/C=US/ST=MI/L=Ann Arbor/O=Internet2/OU=InCommon/CN=InCommon RSA Server CA --- No client certificate CA names sent --- SSL handshake has read 6030 bytes and written 750 bytes Verification: OK --- New, TLSv1.2, Cipher is AES128-GCM-SHA256 Server public key is 4096 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : AES128-GCM-SHA256 Session-ID: 1B0AAEDAEB06597622A980F48AE8E15F87BB43306C0D26E38D208AB507525F6C Session-ID-ctx: Master-Key: AB6584F77DE40B391759B6E26B6320F61A77B41E22DFFA005E9146D4BEBEA5FCC692773C13F3ECC09F27394C279689FB PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 300 (seconds) TLS session ticket: 0000 - 8a 93 fa 3c 8f ab f1 6b-db 99 81 e4 7b aa 49 75 ...<...k....{.Iu 0010 - 4a 7d ce d3 4e af da e1-53 71 82 d0 e0 a0 a5 3b J}..N...Sq.....; 0020 - bf f1 14 07 3a f9 58 75-f7 e3 94 2d 5b 77 c6 a9 ....:.Xu...-[w.. 0030 - ec 19 d5 79 5c 99 ed 6c-c1 7e c8 55 ba 5c 84 23 ...y..l.~.U..# 0040 - 47 0b fa bc 8b 1d bb a9-3d 90 d7 91 c8 0c 0a 80 G.......=....... 0050 - 26 05 f7 97 96 58 69 25-a0 ef 77 82 12 00 d4 35 &....Xi%..w....5 0060 - 7a c4 9a 9c 46 f6 fd 9a-ce cf e6 29 91 d9 f1 fb z...F......).... 0070 - 45 ce b9 fd 38 e6 05 f6-f3 11 1a 1c 59 a0 a5 dd E...8.......Y... 0080 - f4 26 5c f6 65 b8 1e 4c-7c f0 43 3f 19 15 67 95 .&.e..L|.C?..g. 0090 - cd fa e6 a1 41 64 9a a7-e1 b9 5e 97 d4 78 66 ee ....Ad....^..xf. 00a0 - d1 0e 58 61 55 e8 a5 d7-8b 23 3d cd cf f6 f5 78 ..XaU....#=....x 00b0 - b2 9d 92 bb 16 c4 de 47-f8 eb e2 60 4c b0 e4 82 .......G...`L...
Start Time: 1503956011 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: no --- DONE }}}