6708 2014-09-11 13:34:33 +0000 curl SSLv3 certificate validation failure 2015-02-11 15:49:22 +0000 1 1 7 Build System, Metadata & Runtime OE-Core connectivity 1.6 x86 x86 RESOLVED FIXED Medium+ normal 1.6.3 1 bluelightning cristian.iorga brendan.le.foll meta.mr.watcher meta.watcher --- --- No (bug/feature does not impact docs) oldest_to_newest 45533 0 2122 bluelightning 2014-09-11 13:34:33 +0000 Created attachment 2122 Log of curl failure With the latest IoT devkit images on Galileo it seems like there is a bug with respect to validating SSL certificates that causes the connection to fail unless SSLv3 is forced (see attached log, ignoring the certificates issue which seems to be a separate bug as that still happens with ca-certificates installed). I have been able to determine the following: 1) It isn't fixed by upgrading curl using the 7.37 recipe we have in master 2) It does seem to be fixed by either upgrading gnutls to the 3.x version in master, or building curl against OpenSSL instead. 48728 1 bluelightning 2015-02-11 15:49:22 +0000 According to Brendan this issue is fixed in the latest daisy branch, so I'm marking this one as resolved. 2122 2014-09-11 13:34:33 +0000 2014-09-11 13:34:33 +0000 Log of curl failure curl.txt text/plain 1553 bluelightning cm9vdEBxdWFyazp+IyBjdXJsIC12IGh0dHBzOi8vYXdzLmFtYXpvbi5jb20KKiBSZWJ1aWx0IFVS TCB0bzogaHR0cHM6Ly9hd3MuYW1hem9uLmNvbS8KKiBIb3N0bmFtZSB3YXMgTk9UIGZvdW5kIGlu IEROUyBjYWNoZQoqICAgVHJ5aW5nIDE3Ni4zMi4xMDAuMzYuLi4KKiBDb25uZWN0ZWQgdG8gYXdz LmFtYXpvbi5jb20gKDE3Ni4zMi4xMDAuMzYpIHBvcnQgNDQzICgjMCkKKiBmb3VuZCAxNTcgY2Vy dGlmaWNhdGVzIGluIC9ldGMvc3NsL2NlcnRzL2NhLWNlcnRpZmljYXRlcy5jcnQKKiBnbnV0bHNf aGFuZHNoYWtlKCkgZmFpbGVkOiBJbGxlZ2FsIHBhcmFtZXRlcgoqIENsb3NpbmcgY29ubmVjdGlv biAwCmN1cmw6ICgzNSkgZ251dGxzX2hhbmRzaGFrZSgpIGZhaWxlZDogSWxsZWdhbCBwYXJhbWV0 ZXIKCnJvb3RAcXVhcms6fiMgY3VybCAtdiAtMyBodHRwczovL2F3cy5hbWF6b24uY29tCiogUmVi dWlsdCBVUkwgdG86IGh0dHBzOi8vYXdzLmFtYXpvbi5jb20vCiogSG9zdG5hbWUgd2FzIE5PVCBm b3VuZCBpbiBETlMgY2FjaGUKKiAgIFRyeWluZyAxNzYuMzIuOTguMTMxLi4uCiogQ29ubmVjdGVk IHRvIGF3cy5hbWF6b24uY29tICgxNzYuMzIuOTguMTMxKSBwb3J0IDQ0MyAoIzApCiogZm91bmQg MTU3IGNlcnRpZmljYXRlcyBpbiAvZXRjL3NzbC9jZXJ0cy9jYS1jZXJ0aWZpY2F0ZXMuY3J0Ciog c2VydmVyIGNlcnRpZmljYXRlIHZlcmlmaWNhdGlvbiBmYWlsZWQuIENBZmlsZTogL2V0Yy9zc2wv Y2VydHMvY2EtY2VydGlmaWNhdGVzLmNydCBDUkxmaWxlOiBub25lCiogQ2xvc2luZyBjb25uZWN0 aW9uIDAKY3VybDogKDYwKSBzZXJ2ZXIgY2VydGlmaWNhdGUgdmVyaWZpY2F0aW9uIGZhaWxlZC4g Q0FmaWxlOiAvZXRjL3NzbC9jZXJ0cy9jYS1jZXJ0aWZpY2F0ZXMuY3J0IENSTGZpbGU6IG5vbmUK TW9yZSBkZXRhaWxzIGhlcmU6IGh0dHA6Ly9jdXJsLmhheHguc2UvZG9jcy9zc2xjZXJ0cy5odG1s CgpjdXJsIHBlcmZvcm1zIFNTTCBjZXJ0aWZpY2F0ZSB2ZXJpZmljYXRpb24gYnkgZGVmYXVsdCwg dXNpbmcgYSAiYnVuZGxlIgogb2YgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IChDQSkgcHVibGljIGtl eXMgKENBIGNlcnRzKS4gSWYgdGhlIGRlZmF1bHQKIGJ1bmRsZSBmaWxlIGlzbid0IGFkZXF1YXRl LCB5b3UgY2FuIHNwZWNpZnkgYW4gYWx0ZXJuYXRlIGZpbGUKIHVzaW5nIHRoZSAtLWNhY2VydCBv cHRpb24uCklmIHRoaXMgSFRUUFMgc2VydmVyIHVzZXMgYSBjZXJ0aWZpY2F0ZSBzaWduZWQgYnkg YSBDQSByZXByZXNlbnRlZCBpbgogdGhlIGJ1bmRsZSwgdGhlIGNlcnRpZmljYXRlIHZlcmlmaWNh dGlvbiBwcm9iYWJseSBmYWlsZWQgZHVlIHRvIGEKIHByb2JsZW0gd2l0aCB0aGUgY2VydGlmaWNh dGUgKGl0IG1pZ2h0IGJlIGV4cGlyZWQsIG9yIHRoZSBuYW1lIG1pZ2h0CiBub3QgbWF0Y2ggdGhl IGRvbWFpbiBuYW1lIGluIHRoZSBVUkwpLgpJZiB5b3UnZCBsaWtlIHRvIHR1cm4gb2ZmIGN1cmwn cyB2ZXJpZmljYXRpb24gb2YgdGhlIGNlcnRpZmljYXRlLCB1c2UKIHRoZSAtayAob3IgLS1pbnNl Y3VyZSkgb3B0aW9uLgo=