[Mono-list] SSL/TLS issue with Disqus.com

[Daniel Lo Nigro]

Hi,

My code is trying to connect to the Disqus API (https://disqus.com/), but I
have started getting an "Invalid certificate received from server" error.
I've tried running mozcerts --sync to load the latest Mozilla root CAs, and
connecting to other SSL/TLS works fine. I am using Mono 3.0.7, but I
encounter the same issue on Mono 3.0.10. Strangely, running tlstest doesn't
output anything apart from the URL:

23:21 daniel at dan /tmp
% mono tlstest.exe https://disqus.com/

https://disqus.com/

But it works fine for other servers:
23:22 daniel at dan /tmp
% mono tlstest.exe https://google.com/

https://google.com/
[Subject]
  CN=*.google.com, O=Google Inc, L=Mountain View, S=California, C=US
...etc...

Below is the exception I'm getting:
System.Net.WebException: Error getting response stream (Write: The
authentication or decryption has failed.): SendFailure
---> System.IO.IOException: The authentication or decryption has failed.
---> Mono.Security.Protocol.Tls.TlsException: Invalid certificate received
from server. Error code: 0xffffffff800b010a
  at
Mono.Security.Protocol.Tls.Handshake.Client.TlsServerCertificate.validateCertificates
(Mono.Security.X509.X509CertificateCollection certificates) [0x0009b] in
/usr/local/src/mono-3.0.7/mcs/class/Mono.Security/Mono.Security.Protocol.Tls.Handshake.Client/TlsServerCertificate.cs:218
  at
Mono.Security.Protocol.Tls.Handshake.Client.TlsServerCertificate.ProcessAsTls1
() [0x00054] in
/usr/local/src/mono-3.0.7/mcs/class/Mono.Security/Mono.Security.Protocol.Tls.Handshake.Client/TlsServerCertificate.cs:105
  at Mono.Security.Protocol.Tls.Handshake.HandshakeMessage.Process ()
[0x00037] in
/usr/local/src/mono-3.0.7/mcs/class/Mono.Security/Mono.Security.Protocol.Tls.Handshake/HandshakeMessage.cs:105
  at (wrapper remoting-invoke-with-check)
Mono.Security.Protocol.Tls.Handshake.HandshakeMessage:Process ()
  at
Mono.Security.Protocol.Tls.ClientRecordProtocol.ProcessHandshakeMessage
(Mono.Security.Protocol.Tls.TlsStream handMsg) [0x00039] in
/usr/local/src/mono-3.0.7/mcs/class/Mono.Security/Mono.Security.Protocol.Tls/ClientRecordProtocol.cs:81
  at
Mono.Security.Protocol.Tls.RecordProtocol.InternalReceiveRecordCallback
(IAsyncResult asyncResult) [0x00123] in
/usr/local/src/mono-3.0.7/mcs/class/Mono.Security/Mono.Security.Protocol.Tls/RecordProtocol.cs:397
  --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback
(IAsyncResult asyncResult) [0x0002a] in
/usr/local/src/mono-3.0.7/mcs/class/Mono.Security/Mono.Security.Protocol.Tls/SslStreamBase.cs:100
  --- End of inner exception stack trace ---
  at System.Net.HttpWebRequest.EndGetResponse (IAsyncResult asyncResult)
[0x00065] in
/usr/local/src/mono-3.0.7/mcs/class/System/System.Net/HttpWebRequest.cs:926
  at System.Net.HttpWebRequest.GetResponse () [0x0000e] in
/usr/local/src/mono-3.0.7/mcs/class/System/System.Net/HttpWebRequest.cs:932
  at ServiceStack.Text.WebRequestExtensions.GetStringFromUrl (System.String
url, System.String acceptContentType, System.Action`1 responseFilter)
[0x00000] in <filename unknown>:0
  at ServiceStack.Text.WebRequestExtensions.GetJsonFromUrl (System.String
url, System.Action`1 responseFilter) [0x00000] in <filename unknown>:0
  at Daniel15.BusinessLayer.Services.DisqusComments.Sync () [0x0001e] in
c:\Users\Daniel\Documents\Visual Studio
2010\Projects\dan.cx_dotnet\Daniel15.BusinessLayer\Services\DisqusComments.cs:58
  at Daniel15.Cron.CronRunner.Run (System.String operation) [0x00021] in
c:\Users\Daniel\Documents\Visual Studio
2010\Projects\dan.cx_dotnet\Daniel15.Cron\CronRunner.cs:24
  at Daniel15.Cron.CronRunner.Main (System.String[] args) [0x00000] in
c:\Users\Daniel\Documents\Visual Studio
2010\Projects\dan.cx_dotnet\Daniel15.Cron\CronRunner.cs:11

Any ideas?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ximian.com/pipermail/mono-list/attachments/20130527/24f82498/attachment.html>