[Mono-list] SSL/TLS issue with Disqus.com

[Daniel Lo Nigro]

I have other apps connecting via HTTPS fine (including the Twitter API, I
believe). I'm only having issues with Disqus.


On Mon, May 27, 2013 at 11:37 PM, Alberto León <leontiscar at gmail.com> wrote:

> I find similar problem in Mono 3.0.4 in OpenSuse each time I used
> LinqToTwitter or any library that connects with https
>
> But in Debian with Mono 3.0.3 I never found this problem.
>
> I suppose is at configuration level, but I don't have idea what is
> necesary to change
>
>
> 2013/5/27 Daniel Lo Nigro <lists at dan.cx>
>
>> Hi,
>>
>> My code is trying to connect to the Disqus API (https://disqus.com/),
>> but I have started getting an "Invalid certificate received from server"
>> error. I've tried running mozcerts --sync to load the latest Mozilla
>> root CAs, and connecting to other SSL/TLS works fine. I am using Mono
>> 3.0.7, but I encounter the same issue on Mono 3.0.10. Strangely, running
>> tlstest doesn't output anything apart from the URL:
>>
>> 23:21 daniel at dan /tmp
>> % mono tlstest.exe https://disqus.com/
>>
>> https://disqus.com/
>>
>> But it works fine for other servers:
>> 23:22 daniel at dan /tmp
>> % mono tlstest.exe https://google.com/
>>
>> https://google.com/
>> [Subject]
>>   CN=*.google.com, O=Google Inc, L=Mountain View, S=California, C=US
>> ...etc...
>>
>> Below is the exception I'm getting:
>> System.Net.WebException: Error getting response stream (Write: The
>> authentication or decryption has failed.): SendFailure
>> ---> System.IO.IOException: The authentication or decryption has failed.
>> ---> Mono.Security.Protocol.Tls.TlsException: Invalid certificate
>> received from server. Error code: 0xffffffff800b010a
>>   at
>> Mono.Security.Protocol.Tls.Handshake.Client.TlsServerCertificate.validateCertificates
>> (Mono.Security.X509.X509CertificateCollection certificates) [0x0009b] in
>> /usr/local/src/mono-3.0.7/mcs/class/Mono.Security/Mono.Security.Protocol.Tls.Handshake.Client/TlsServerCertificate.cs:218
>>   at
>> Mono.Security.Protocol.Tls.Handshake.Client.TlsServerCertificate.ProcessAsTls1
>> () [0x00054] in
>> /usr/local/src/mono-3.0.7/mcs/class/Mono.Security/Mono.Security.Protocol.Tls.Handshake.Client/TlsServerCertificate.cs:105
>>   at Mono.Security.Protocol.Tls.Handshake.HandshakeMessage.Process ()
>> [0x00037] in
>> /usr/local/src/mono-3.0.7/mcs/class/Mono.Security/Mono.Security.Protocol.Tls.Handshake/HandshakeMessage.cs:105
>>   at (wrapper remoting-invoke-with-check)
>> Mono.Security.Protocol.Tls.Handshake.HandshakeMessage:Process ()
>>   at
>> Mono.Security.Protocol.Tls.ClientRecordProtocol.ProcessHandshakeMessage
>> (Mono.Security.Protocol.Tls.TlsStream handMsg) [0x00039] in
>> /usr/local/src/mono-3.0.7/mcs/class/Mono.Security/Mono.Security.Protocol.Tls/ClientRecordProtocol.cs:81
>>   at
>> Mono.Security.Protocol.Tls.RecordProtocol.InternalReceiveRecordCallback
>> (IAsyncResult asyncResult) [0x00123] in
>> /usr/local/src/mono-3.0.7/mcs/class/Mono.Security/Mono.Security.Protocol.Tls/RecordProtocol.cs:397
>>   --- End of inner exception stack trace ---
>>   at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback
>> (IAsyncResult asyncResult) [0x0002a] in
>> /usr/local/src/mono-3.0.7/mcs/class/Mono.Security/Mono.Security.Protocol.Tls/SslStreamBase.cs:100
>>   --- End of inner exception stack trace ---
>>   at System.Net.HttpWebRequest.EndGetResponse (IAsyncResult asyncResult)
>> [0x00065] in
>> /usr/local/src/mono-3.0.7/mcs/class/System/System.Net/HttpWebRequest.cs:926
>>   at System.Net.HttpWebRequest.GetResponse () [0x0000e] in
>> /usr/local/src/mono-3.0.7/mcs/class/System/System.Net/HttpWebRequest.cs:932
>>   at ServiceStack.Text.WebRequestExtensions.GetStringFromUrl
>> (System.String url, System.String acceptContentType, System.Action`1
>> responseFilter) [0x00000] in <filename unknown>:0
>>   at ServiceStack.Text.WebRequestExtensions.GetJsonFromUrl (System.String
>> url, System.Action`1 responseFilter) [0x00000] in <filename unknown>:0
>>   at Daniel15.BusinessLayer.Services.DisqusComments.Sync () [0x0001e] in
>> c:\Users\Daniel\Documents\Visual Studio
>> 2010\Projects\dan.cx_dotnet\Daniel15.BusinessLayer\Services\DisqusComments.cs:58
>>   at Daniel15.Cron.CronRunner.Run (System.String operation) [0x00021] in
>> c:\Users\Daniel\Documents\Visual Studio
>> 2010\Projects\dan.cx_dotnet\Daniel15.Cron\CronRunner.cs:24
>>   at Daniel15.Cron.CronRunner.Main (System.String[] args) [0x00000] in
>> c:\Users\Daniel\Documents\Visual Studio
>> 2010\Projects\dan.cx_dotnet\Daniel15.Cron\CronRunner.cs:11
>>
>> Any ideas?
>>
>>
>> _______________________________________________
>> Mono-list maillist  -  Mono-list at lists.ximian.com
>> http://lists.ximian.com/mailman/listinfo/mono-list
>>
>>
>
>
> --
> https://twitter.com/AlbertCSharpMan
> http://stackoverflow.com/users/690958/alberto-leon
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ximian.com/pipermail/mono-list/attachments/20130527/0a498fa0/attachment-0001.html>