Hi, Pierre (et bon jour), there is nothing to send, it is totally clean: ======= jwa@bach:macports-trunk> svn status jwa@bach:macports-trunk> ======= On 26.9.2006, at 17.43, Pierre Queinnec wrote:

Huva paiva Jyrki, (Hyvää päivää est meilleur, mais c'est bon)

Can you send us the output of 'svn st' in the macports-trunk directory? You can try using 'svn cleanup' if you see 'L' (locked) files. -- Pierre

Jyrki Wahlstedt wrote:

...

To update: - I can commit, which is fine - update problems appear only at the top levels. My collection is at ~/work/macports-trunk/dports, say my php5 Portfile is at prev/ www/php5/Portfile. If I do the update in port (php5) directory or category (www) directory, it succeeds, but if I do the update in collection directory (dports), it fails (as well as in macports- trunk). So I am half-happy, as I can do a workaround update. It should work, though… On 26.9.2006, at 15.13, Jyrki Wahlstedt wrote:

...

Hi, and thanks for the advice, but, sad to say, it did not work for me. Are you using 1.3.0, perhaps? I have 1.4.0, and it is actually using Keychain. I have removed ~/.subversion/auth/*, ~/.subversion/auth, ~/.subversion, and the password entry in Keychain, and done checkout (no problems) followed by update, and the problem persists:-(

On 25.9.2006, at 14.19, Pierre Queinnec wrote:

...

Hi Jyrki,

Try nuking the stored SSL certificate in ~/.subversion/ auth_ssl_something (I'm at work, can't check the right directory name now). Worked for me. -- Pierre

Jyrki Wahlstedt wrote:

...

Hi, I have a problem. Repository checkout succeeds easily, but in trunk directory, ,while trying to update, the result usually is: ======= jwa@bach:macports-trunk> svn update svn: PROPFIND request failed on '/repository/macports/trunk' svn: PROPFIND of '/repository/macports/trunk': SSL negotiation failed: SSL error: sslv3 alert bad record mac (https:// svn.macports.org) ======= Previously I managed to do the update, but now, what is going on, I'm not sure.

! ! Jyrki Wahlstedt ! Kolmas linja 12 A 18 mob. +358-400-347 015 skype:jyrkiwahlstedt ! FI-00530 Helsinki www.wahlstedt.fi ! ! Our life is no dream; but it ought to become one and perhaps will. ! PGP key ID: 0x139CC386 fingerprint: F355 B46F 026C B8C1 89C0 A780 6366 EFD9 139C C386

_______________________________________________ macports-dev mailing list macports-dev@lists.macosforge.org http://lists.macosforge.org/mailman/listinfo/macports-dev

---

macports-dev mailing list macports-dev@lists.macosforge.org http://lists.macosforge.org/mailman/listinfo/macports-dev

! ! Jyrki Wahlstedt ! Kolmas linja 12 A 18 mob. +358-400-347 015 skype:jyrkiwahlstedt ! FI-00530 Helsinki www.wahlstedt.fi ! ! Our life is no dream; but it ought to become one and perhaps will. ! PGP key ID: 0x139CC386 fingerprint: F355 B46F 026C B8C1 89C0 A780 6366 EFD9 139C C386

On Sep 26, 2006, at 12:14 PM, Juan Manuel Palacios wrote:

After that I can svn up again with no problems ;-)

Something seems to be wrong, though: % openssl s_client -connect svn.macports.org:443 -tls1 CONNECTED(00000003) depth=1 /C=US/ST=California/L=Cupertino/O=Apple Computer, Inc./ OU=opensource.apple.com/CN=opensource.apple.com certificate authority/ emailAddress=admin@opensource.apple.com verify error:num=19:self signed certificate in certificate chain verify return:0 7023:error:140943FC:SSL routines:SSL3_READ_BYTES:sslv3 alert bad record mac:s3_pkt.c:1057:SSL alert number 20 7023:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:s3_pkt.c:534: ... but it seems to be intermittent: Working -> % openssl s_client -connect svn.macports.org:443 -tls1 -msg CONNECTED(00000003)

...

...

TLS 1.0 Handshake [length 0054], ClientHello 01 00 00 50 03 01 45 19 61 c0 83 12 3d c3 f7 01 a7 9a 68 a3 96 ac 91 31 1f 29 d0 dd ec 02 b0 ea 51 40 41 bf b0 ae 00 00 28 00 39 00 38 00 35 00 16 00 13 00 0a 00 33 00 32 00 2f 00 07 00 05 00 04 00 15 00 12 00 09 00 14 00 11 00 08 00 06 00 03 02 01 00 <<< TLS 1.0 Handshake [length 002a], ServerHello 02 00 00 26 03 01 45 19 61 a0 23 63 f0 72 d8 ad 52 1a e6 4f 5a f2 be 6a af c6 af 2d b2 23 47 02 98 70 c7 0d d3 14 00 00 39 01 <<< TLS 1.0 Handshake [length 090d], Certificate 0b 00 09 09 00 09 06 00 03 8e 30 82 03 8a 30 82 02 72 02 09 00 9c 73 58 e3 d4 6d 73 6e 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 30 81 d4 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 43 61 6c 69 66 6f 72 6e 69 61 31 12 30 10 06 03 55 04 07 13 09 43 75 70 65 72 74 69 6e 6f 31 1d 30 1b 06 03 55 04 0a 13 14 41 70 70 6c 65 20 43 6f 6d 70 75 74 65 72 2c 20 49 6e 63 2e 31 1d 30 1b 06 03 55 04 0b 13 14 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 31 33 30 31 06 03 55 04 03 13 2a 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 31 29 30 27 06 09 2a 86 48 86 f7 0d 01 09 01 16 1a 61 64 6d 69 6e 40 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 30 1e 17 0d 30 36 30 38 30 35 30 32 30 32 30 34 5a 17 0d 31 36 30 38 30 32 30 32 30 32 30 34 5a 30 81 bc 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 43 61 6c 69 66 6f 72 6e 69 61 31 12 30 10 06 03 55 04 07 13 09 43 75 70 65 72 74 69 6e 6f 31 1d 30 1b 06 03 55 04 0a 13 14 41 70 70 6c 65 20 43 6f 6d 70 75 74 65 72 2c 20 49 6e 63 2e 31 1d 30 1b 06 03 55 04 0b 13 14 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 31 1b 30 19 06 03 55 04 03 13 12 73 76 6e 2e 6d 61 63 6f 73 66 6f 72 67 65 2e 6f 72 67 31 29 30 27 06 09 2a 86 48 86 f7 0d 01 09 01 16 1a 61 64 6d 69 6e 40 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 30 81 9f 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 81 8d 00 30 81 89 02 81 81 00 ce 2a a7 1a a5 e9 c8 59 2f 1d 1e b3 be ec 42 df e2 1b ea 65 91 09 45 f5 ce 3c 60 06 99 12 48 3f 9d a7 46 69 67 22 d2 79 3f 16 e6 54 08 4f b3 e3 4b e2 b2 13 18 2c 60 ad e9 14 e5 c8 83 18 b8 bf 58 dc 0f 6a b4 cd 71 07 77 2c 47 ef d2 0a a5 8e d9 61 69 9b 35 8d 2a bd 95 b8 e3 28 43 fd 21 55 c9 fa 20 da 2a 97 f5 e1 d2 ab b9 ec 10 45 6c 30 22 94 f9 b2 23 48 2b c0 db 45 0e 20 e9 4a e5 31 02 03 01 00 01 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 82 01 01 00 5c 1b 07 d3 50 fe 7d 6a 14 5c 54 78 92 a3 c4 68 89 37 b4 47 1a c5 70 e6 65 24 07 3a 00 98 d4 ce 63 0a 07 c2 8c 16 3a 28 35 fa 5f 3d c2 1c e3 40 1e 9b d5 1e c8 e5 1a b2 3e 74 0c 49 96 08 3c 96 d1 fd cb 32 a4 a6 69 b1 42 02 30 f0 63 1e e9 e5 76 6d 7d 8d 88 ad 0c b8 88 68 61 f1 20 c9 ea 84 6e 21 e0 06 f1 06 a4 6a ea 5d 8f 0f 20 87 ab ba d7 53 d0 18 48 6f 0c 80 52 8c 93 03 86 5a 7f eb e0 ff ba 22 5a 36 06 00 99 f2 de e1 33 d9 a8 51 59 89 74 9f af 93 2e 59 81 67 9d a5 b3 30 d7 09 aa 0c 73 13 74 36 41 56 80 49 19 b9 63 e5 32 b1 2e 81 f5 11 7c 8a 38 08 fd 39 fa 69 7e 5e 16 90 2d 9b 47 10 3c 8a 2b bc 18 a3 c5 b3 80 fc 8e 6f 4f f5 42 e4 dd fb 7b 7f 3c 6d ba 6b 91 73 4b 28 21 15 51 96 97 a2 c8 21 ed ce d4 06 00 97 ae 84 5e a0 e1 ae df f0 8b ad ba 3d fa 44 31 0d 6a 60 00 05 72 30 82 05 6e 30 82 04 56 a0 03 02 01 02 02 09 00 d5 a3 99 c3 69 dc 60 e4 30 0d 06 09 2a 86 48 86 f7 0d 01 01 04 05 00 30 81 d4 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 43 61 6c 69 66 6f 72 6e 69 61 31 12 30 10 06 03 55 04 07 13 09 43 75 70 65 72 74 69 6e 6f 31 1d 30 1b 06 03 55 04 0a 13 14 41 70 70 6c 65 20 43 6f 6d 70 75 74 65 72 2c 20 49 6e 63 2e 31 1d 30 1b 06 03 55 04 0b 13 14 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 31 33 30 31 06 03 55 04 03 13 2a 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 31 29 30 27 06 09 2a 86 48 86 f7 0d 01 09 01 16 1a 61 64 6d 69 6e 40 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 30 1e 17 0d 30 36 30 37 32 38 32 30 31 31 35 33 5a 17 0d 31 36 30 37 32 35 32 30 31 31 35 33 5a 30 81 d4 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 43 61 6c 69 66 6f 72 6e 69 61 31 12 30 10 06 03 55 04 07 13 09 43 75 70 65 72 74 69 6e 6f 31 1d 30 1b 06 03 55 04 0a 13 14 41 70 70 6c 65 20 43 6f 6d 70 75 74 65 72 2c 20 49 6e 63 2e 31 1d 30 1b 06 03 55 04 0b 13 14 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 31 33 30 31 06 03 55 04 03 13 2a 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 31 29 30 27 06 09 2a 86 48 86 f7 0d 01 09 01 16 1a 61 64 6d 69 6e 40 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 ab a4 56 55 91 fc 18 67 75 36 bd 94 77 71 68 92 ec bc 5a b3 85 01 ac cb 49 14 87 f6 d4 aa 8b 75 f3 8f 31 d3 3d 27 19 58 38 76 a0 64 16 c4 98 59 60 4d 5a 96 93 11 c7 63 ed 60 68 6c 06 78 92 8a 37 38 c6 96 ff b3 c8 ac de e7 19 a9 6b 5f 55 c0 11 0b c9 1e 5a a0 f4 37 a9 19 ce cb 25 7c 10 e4 fb 99 e6 a4 2d 56 3c 71 d0 f4 79 85 ed 09 43 23 19 1f d5 b7 99 dc b6 45 6e c0 55 92 fe 50 25 06 38 51 6e 2b de 73 07 a8 ab 58 db 35 e1 3e 60 04 f6 05 56 d2 fa d7 3f ed 62 d2 4d 8c d8 dc d7 9b 18 55 45 e0 12 3c e0 ff 91 fb 91 17 da 6f 5b 8c 07 75 8e c8 f4 06 ad 63 97 f1 26 bf 28 bc 81 ab df 79 ab 21 bd 39 d3 f0 3d 59 f7 e4 f9 65 a5 4f 6c 86 c5 33 84 bc b9 23 07 c1 46 42 95 d3 86 33 58 de c1 a4 92 6f 99 97 d5 87 6c 3e f0 a6 23 b7 5d c9 32 5c ea fb cc 6e 78 a0 0d f8 a7 c8 34 0b 02 03 01 00 01 a3 82 01 3f 30 82 01 3b 30 1d 06 03 55 1d 0e 04 16 04 14 63 65 78 1b a9 5f 58 05 2d a2 9c ca 17 d2 01 9f 90 f9 89 bd 30 82 01 0a 06 03 55 1d 23 04 82 01 01 30 81 fe 80 14 63 65 78 1b a9 5f 58 05 2d a2 9c ca 17 d2 01 9f 90 f9 89 bd a1 81 da a4 81 d7 30 81 d4 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 43 61 6c 69 66 6f 72 6e 69 61 31 12 30 10 06 03 55 04 07 13 09 43 75 70 65 72 74 69 6e 6f 31 1d 30 1b 06 03 55 04 0a 13 14 41 70 70 6c 65 20 43 6f 6d 70 75 74 65 72 2c 20 49 6e 63 2e 31 1d 30 1b 06 03 55 04 0b 13 14 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 31 33 30 31 06 03 55 04 03 13 2a 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 31 29 30 27 06 09 2a 86 48 86 f7 0d 01 09 01 16 1a 61 64 6d 69 6e 40 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 82 09 00 d5 a3 99 c3 69 dc 60 e4 30 0c 06 03 55 1d 13 04 05 30 03 01 01 ff 30 0d 06 09 2a 86 48 86 f7 0d 01 01 04 05 00 03 82 01 01 00 83 3e 2d ca 18 52 07 9c 6c 24 07 b4 cb c6 c0 ad 05 91 02 94 5d ab 60 2c 94 24 68 86 e2 6a f6 76 ef 5a ee 39 04 9d 91 34 1a 18 58 0a b0 0d 3d a3 76 ef 6c f3 f8 d5 47 b3 ec 5b ae 8e cf 2e 85 a0 22 c5 a7 e0 af 4f f5 59 49 53 cc 3a 54 8a 0a b5 25 50 5d 33 22 90 19 ec a0 4f 0d 47 4f f4 1d 14 bf 56 2e 75 62 f9 3a 1d 1d 0b e5 9e 25 4c 42 85 40 a0 3c 2a 23 79 ec 8b fd 77 5e 62 13 55 ac 8e 33 2b 76 49 cf 86 f9 ab 16 25 1d 59 95 22 ed 7d 52 5c 2b 06 00 a3 84 39 2c 7d be 3f bf d3 cd 58 3d 7d b4 1a 35 1b ba 1d ba 0a 2e 8d d6 bf d1 69 03 f1 a0 bf 7c 88 00 24 c0 07 74 6b 05 82 8d 62 fc 00 c5 f5 e3 d8 49 56 b1 0e 78 df a4 37 7f 57 e0 17 b2 c6 c4 c5 16 61 15 73 ab 58 ea 7b 03 b0 89 ba 0f 96 b5 fb d5 e9 92 5a 46 0e 86 d5 33 83 c8 90 f7 d1 fd 8f cd 2f 4f c2 21 b9 6f c5 aa ac depth=1 /C=US/ST=California/L=Cupertino/O=Apple Computer, Inc./ OU=opensource.apple.com/CN=opensource.apple.com certificate authority/ emailAddress=admin@opensource.apple.com verify error:num=19:self signed certificate in certificate chain verify return:0 <<< TLS 1.0 Handshake [length 018d], ServerKeyExchange 0c 00 01 89 00 80 d6 7d e4 40 cb bb dc 19 36 d6 93 d3 4a fd 0a d5 0c 84 d2 39 a4 5f 52 0b b8 81 74 cb 98 bc e9 51 84 9f 91 2e 63 9c 72 fb 13 b4 b4 d7 17 7e 16 d5 5a c1 79 ba 42 0b 2a 29 fe 32 4a 46 7a 63 5e 81 ff 59 01 37 7b ed dc fd 33 16 8a 46 1a ad 3b 72 da e8 86 00 78 04 5b 07 a7 db ca 78 74 08 7d 15 10 ea 9f cc 9d dd 33 05 07 dd 62 db 88 ae aa 74 7d e0 f4 d6 e2 bd 68 b0 e7 39 3e 0f 24 21 8e b3 00 01 02 00 80 d5 c4 dc e9 73 75 7f 08 98 2d b9 83 94 91 bb 81 1d 03 28 31 64 59 73 de 69 7f c3 83 da df 6b b0 92 7a fd 41 6b 19 c3 bd 5e c8 07 4f 85 5d 23 ee ef 00 c7 b0 e0 ce 36 a6 bd 56 d4 54 98 a8 8b 6c 0e 03 d6 50 1a 6e fa 45 9d 67 30 13 90 8a 9d e3 b4 aa ba c8 ae aa c1 c8 79 1a 89 b7 46 bd b9 4e 34 c4 a3 4b 87 0a 12 74 e5 f6 1d b2 4e ce 9e d8 b1 de f9 8d 46 36 ee b1 ca 27 4c 57 cf 48 6c e8 00 80 b3 5b 33 6d 09 5a e9 de 01 6f e8 4c e3 3c 1e 43 f9 9d 1a 86 19 e4 c1 d9 1a f8 ca e9 16 e1 91 df 64 26 ff ea e3 38 b3 99 bb 53 76 36 33 5c 3b 73 86 a7 c1 5d 27 6e c0 bc c5 4b eb f5 a0 2a 46 61 49 0b b3 3e 7f 15 d7 30 cf 15 02 bb 1e 5a 37 f5 58 77 2b 58 c7 da 4f 36 83 b4 e9 cb fb b7 e5 f3 20 19 cb f4 cc 45 09 8d ab 84 39 f8 3e 8f 03 e4 74 1c b6 7f 37 bd b4 bf 7f 76 67 a7 09 e3 ae 00 <<< TLS 1.0 Handshake [length 0004], ServerHelloDone 0e 00 00 00 TLS 1.0 Handshake [length 0086], ClientKeyExchange 10 00 00 82 00 80 5b 1c 89 72 48 93 c4 b8 3c b0 c0 2f 39 3a d4 b0 e0 18 db c5 90 b6 11 4d 16 38 98 8c b5 e8 94 b1 c2 dc 2a 76 fb 98 4d a9 6c 25 8c 76 6e 0d ae 2b 40 d8 f9 e4 37 dd 3c f1 1e 1d bd ce 49 ed 92 66 b6 6f b4 63 88 a7 8b e0 d5 39 f6 10 75 c7 a1 58 aa 3f 8f 1a 8b 36 58 54 0d 75 9e c9 93 21 47 2e b5 4f 0b 0b 26 ef be 4d 58 e9 b8 cb 1a 81 a6 11 8c 59 df 1a 62 1b c8 13 00 fa b9 6d fe cb 7e 79 TLS 1.0 ChangeCipherSpec [length 0001] 01 TLS 1.0 Handshake [length 0010], Finished 14 00 00 0c 84 11 4a 3f 27 2d c1 68 18 0d 7b 63 <<< TLS 1.0 ChangeCipherSpec [length 0001] 01 <<< TLS 1.0 Handshake [length 0010], Finished 14 00 00 0c 22 7d ae 16 aa 4e 49 77 df 0b 72 b8

Certificate chain 0 s:/C=US/ST=California/L=Cupertino/O=Apple Computer, Inc./ OU=opensource.apple.com/CN=svn.macosforge.org/ emailAddress=admin@opensource.apple.com i:/C=US/ST=California/L=Cupertino/O=Apple Computer, Inc./ OU=opensource.apple.com/CN=opensource.apple.com certificate authority/ emailAddress=admin@opensource.apple.com 1 s:/C=US/ST=California/L=Cupertino/O=Apple Computer, Inc./ OU=opensource.apple.com/CN=opensource.apple.com certificate authority/ emailAddress=admin@opensource.apple.com i:/C=US/ST=California/L=Cupertino/O=Apple Computer, Inc./ OU=opensource.apple.com/CN=opensource.apple.com certificate authority/ emailAddress=admin@opensource.apple.com --- Server certificate -----BEGIN CERTIFICATE----- MIIDijCCAnICCQCcc1jj1G1zbjANBgkqhkiG9w0BAQUFADCB1DELMAkGA1UEBhMC VVMxEzARBgNVBAgTCkNhbGlmb3JuaWExEjAQBgNVBAcTCUN1cGVydGlubzEdMBsG A1UEChMUQXBwbGUgQ29tcHV0ZXIsIEluYy4xHTAbBgNVBAsTFG9wZW5zb3VyY2Uu YXBwbGUuY29tMTMwMQYDVQQDEypvcGVuc291cmNlLmFwcGxlLmNvbSBjZXJ0aWZp Y2F0ZSBhdXRob3JpdHkxKTAnBgkqhkiG9w0BCQEWGmFkbWluQG9wZW5zb3VyY2Uu YXBwbGUuY29tMB4XDTA2MDgwNTAyMDIwNFoXDTE2MDgwMjAyMDIwNFowgbwxCzAJ BgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRIwEAYDVQQHEwlDdXBlcnRp bm8xHTAbBgNVBAoTFEFwcGxlIENvbXB1dGVyLCBJbmMuMR0wGwYDVQQLExRvcGVu c291cmNlLmFwcGxlLmNvbTEbMBkGA1UEAxMSc3ZuLm1hY29zZm9yZ2Uub3JnMSkw JwYJKoZIhvcNAQkBFhphZG1pbkBvcGVuc291cmNlLmFwcGxlLmNvbTCBnzANBgkq hkiG9w0BAQEFAAOBjQAwgYkCgYEAziqnGqXpyFkvHR6zvuxC3+Ib6mWRCUX1zjxg BpkSSD+dp0ZpZyLSeT8W5lQIT7PjS+KyExgsYK3pFOXIgxi4v1jcD2q0zXEHdyxH 79IKpY7ZYWmbNY0qvZW44yhD/SFVyfog2iqX9eHSq7nsEEVsMCKU+bIjSCvA20UO IOlK5TECAwEAATANBgkqhkiG9w0BAQUFAAOCAQEAXBsH01D+fWoUXFR4kqPEaIk3 tEcaxXDmZSQHOgCY1M5jCgfCjBY6KDX6Xz3CHONAHpvVHsjlGrI+dAxJlgg8ltH9 yzKkpmmxQgIw8GMe6eV2bX2NiK0MuIhoYfEgyeqEbiHgBvEGpGrqXY8PIIerutdT 0BhIbwyAUoyTA4Zaf+vg/7oiWjYGAJny3uEz2ahRWYl0n6+TLlmBZ52lszDXCaoM cxN0NkFWgEkZuWPlMrEugfURfIo4CP05+ml+XhaQLZtHEDyKK7wYo8WzgPyOb0/1 QuTd+3t/PG26a5FzSyghFVGWl6LIIe3O1AYAl66EXqDhrt/wi626PfpEMQ1qYA== -----END CERTIFICATE----- subject=/C=US/ST=California/L=Cupertino/O=Apple Computer, Inc./ OU=opensource.apple.com/CN=svn.macosforge.org/ emailAddress=admin@opensource.apple.com issuer=/C=US/ST=California/L=Cupertino/O=Apple Computer, Inc./ OU=opensource.apple.com/CN=opensource.apple.com certificate authority/ emailAddress=admin@opensource.apple.com --- No client certificate CA names sent --- SSL handshake has read 2839 bytes and written 287 bytes --- New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA Server public key is 1024 bit Compression: zlib compression Expansion: zlib compression SSL-Session: Protocol : TLSv1 Cipher : DHE-RSA-AES256-SHA Session-ID: Session-ID-ctx: Master-Key: DF62461B90AD51029F240194932B7F820D08D221F25203B0843CAC4BBCB0921D6769FAB2 ED8C3D7F66DEBC5FC66B4993 Key-Arg : None Compression: 1 (zlib compression) Start Time: 1159291328 Timeout : 7200 (sec) Verify return code: 19 (self signed certificate in certificate chain) --- GET / <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>301 Moved Permanently</title> </head><body> <h1>Moved Permanently</h1> <p>The document has moved <a href="http://www.macosforge.org/">here</ a>.</p> <hr> <address>Apache/2.2.3 (Unix) DAV/2 SVN/1.4.0 mod_python/3.2.8 Python/ 2.4.3 mod_ssl/2.2.3 OpenSSL/0.9.8b Server at svn.macosforge.org Port 443</address> </body></html> <<< TLS 1.0 Alert [length 0002], warning close_notify 01 00 closed

...

...

TLS 1.0 Alert [length 0002], warning close_notify 01 00

Not Working -> % openssl s_client -connect svn.macports.org:443 -tls1 -msg CONNECTED(00000003)

...

...

TLS 1.0 Handshake [length 0054], ClientHello 01 00 00 50 03 01 45 19 61 d8 63 52 78 c8 1e e1 93 d7 59 cb 6b 72 52 d7 da a1 fa 1f 21 9d 6f 87 e0 81 af c9 76 aa 00 00 28 00 39 00 38 00 35 00 16 00 13 00 0a 00 33 00 32 00 2f 00 07 00 05 00 04 00 15 00 12 00 09 00 14 00 11 00 08 00 06 00 03 02 01 00 <<< TLS 1.0 Handshake [length 002a], ServerHello 02 00 00 26 03 01 45 19 61 b8 50 6c 2d 4a ac 06 92 ee c6 f3 1e e7 66 88 6e 6d 2d 6b af 17 c7 d7 6c 7d b3 9f 87 48 00 00 39 01 <<< TLS 1.0 Handshake [length 090d], Certificate 0b 00 09 09 00 09 06 00 03 8e 30 82 03 8a 30 82 02 72 02 09 00 9c 73 58 e3 d4 6d 73 6e 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 30 81 d4 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 43 61 6c 69 66 6f 72 6e 69 61 31 12 30 10 06 03 55 04 07 13 09 43 75 70 65 72 74 69 6e 6f 31 1d 30 1b 06 03 55 04 0a 13 14 41 70 70 6c 65 20 43 6f 6d 70 75 74 65 72 2c 20 49 6e 63 2e 31 1d 30 1b 06 03 55 04 0b 13 14 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 31 33 30 31 06 03 55 04 03 13 2a 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 31 29 30 27 06 09 2a 86 48 86 f7 0d 01 09 01 16 1a 61 64 6d 69 6e 40 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 30 1e 17 0d 30 36 30 38 30 35 30 32 30 32 30 34 5a 17 0d 31 36 30 38 30 32 30 32 30 32 30 34 5a 30 81 bc 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 43 61 6c 69 66 6f 72 6e 69 61 31 12 30 10 06 03 55 04 07 13 09 43 75 70 65 72 74 69 6e 6f 31 1d 30 1b 06 03 55 04 0a 13 14 41 70 70 6c 65 20 43 6f 6d 70 75 74 65 72 2c 20 49 6e 63 2e 31 1d 30 1b 06 03 55 04 0b 13 14 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 31 1b 30 19 06 03 55 04 03 13 12 73 76 6e 2e 6d 61 63 6f 73 66 6f 72 67 65 2e 6f 72 67 31 29 30 27 06 09 2a 86 48 86 f7 0d 01 09 01 16 1a 61 64 6d 69 6e 40 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 30 81 9f 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 81 8d 00 30 81 89 02 81 81 00 ce 2a a7 1a a5 e9 c8 59 2f 1d 1e b3 be ec 42 df e2 1b ea 65 91 09 45 f5 ce 3c 60 06 99 12 48 3f 9d a7 46 69 67 22 d2 79 3f 16 e6 54 08 4f b3 e3 4b e2 b2 13 18 2c 60 ad e9 14 e5 c8 83 18 b8 bf 58 dc 0f 6a b4 cd 71 07 77 2c 47 ef d2 0a a5 8e d9 61 69 9b 35 8d 2a bd 95 b8 e3 28 43 fd 21 55 c9 fa 20 da 2a 97 f5 e1 d2 ab b9 ec 10 45 6c 30 22 94 f9 b2 23 48 2b c0 db 45 0e 20 e9 4a e5 31 02 03 01 00 01 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 82 01 01 00 5c 1b 07 d3 50 fe 7d 6a 14 5c 54 78 92 a3 c4 68 89 37 b4 47 1a c5 70 e6 65 24 07 3a 00 98 d4 ce 63 0a 07 c2 8c 16 3a 28 35 fa 5f 3d c2 1c e3 40 1e 9b d5 1e c8 e5 1a b2 3e 74 0c 49 96 08 3c 96 d1 fd cb 32 a4 a6 69 b1 42 02 30 f0 63 1e e9 e5 76 6d 7d 8d 88 ad 0c b8 88 68 61 f1 20 c9 ea 84 6e 21 e0 06 f1 06 a4 6a ea 5d 8f 0f 20 87 ab ba d7 53 d0 18 48 6f 0c 80 52 8c 93 03 86 5a 7f eb e0 ff ba 22 5a 36 06 00 99 f2 de e1 33 d9 a8 51 59 89 74 9f af 93 2e 59 81 67 9d a5 b3 30 d7 09 aa 0c 73 13 74 36 41 56 80 49 19 b9 63 e5 32 b1 2e 81 f5 11 7c 8a 38 08 fd 39 fa 69 7e 5e 16 90 2d 9b 47 10 3c 8a 2b bc 18 a3 c5 b3 80 fc 8e 6f 4f f5 42 e4 dd fb 7b 7f 3c 6d ba 6b 91 73 4b 28 21 15 51 96 97 a2 c8 21 ed ce d4 06 00 97 ae 84 5e a0 e1 ae df f0 8b ad ba 3d fa 44 31 0d 6a 60 00 05 72 30 82 05 6e 30 82 04 56 a0 03 02 01 02 02 09 00 d5 a3 99 c3 69 dc 60 e4 30 0d 06 09 2a 86 48 86 f7 0d 01 01 04 05 00 30 81 d4 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 43 61 6c 69 66 6f 72 6e 69 61 31 12 30 10 06 03 55 04 07 13 09 43 75 70 65 72 74 69 6e 6f 31 1d 30 1b 06 03 55 04 0a 13 14 41 70 70 6c 65 20 43 6f 6d 70 75 74 65 72 2c 20 49 6e 63 2e 31 1d 30 1b 06 03 55 04 0b 13 14 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 31 33 30 31 06 03 55 04 03 13 2a 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 31 29 30 27 06 09 2a 86 48 86 f7 0d 01 09 01 16 1a 61 64 6d 69 6e 40 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 30 1e 17 0d 30 36 30 37 32 38 32 30 31 31 35 33 5a 17 0d 31 36 30 37 32 35 32 30 31 31 35 33 5a 30 81 d4 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 43 61 6c 69 66 6f 72 6e 69 61 31 12 30 10 06 03 55 04 07 13 09 43 75 70 65 72 74 69 6e 6f 31 1d 30 1b 06 03 55 04 0a 13 14 41 70 70 6c 65 20 43 6f 6d 70 75 74 65 72 2c 20 49 6e 63 2e 31 1d 30 1b 06 03 55 04 0b 13 14 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 31 33 30 31 06 03 55 04 03 13 2a 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 31 29 30 27 06 09 2a 86 48 86 f7 0d 01 09 01 16 1a 61 64 6d 69 6e 40 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 ab a4 56 55 91 fc 18 67 75 36 bd 94 77 71 68 92 ec bc 5a b3 85 01 ac cb 49 14 87 f6 d4 aa 8b 75 f3 8f 31 d3 3d 27 19 58 38 76 a0 64 16 c4 98 59 60 4d 5a 96 93 11 c7 63 ed 60 68 6c 06 78 92 8a 37 38 c6 96 ff b3 c8 ac de e7 19 a9 6b 5f 55 c0 11 0b c9 1e 5a a0 f4 37 a9 19 ce cb 25 7c 10 e4 fb 99 e6 a4 2d 56 3c 71 d0 f4 79 85 ed 09 43 23 19 1f d5 b7 99 dc b6 45 6e c0 55 92 fe 50 25 06 38 51 6e 2b de 73 07 a8 ab 58 db 35 e1 3e 60 04 f6 05 56 d2 fa d7 3f ed 62 d2 4d 8c d8 dc d7 9b 18 55 45 e0 12 3c e0 ff 91 fb 91 17 da 6f 5b 8c 07 75 8e c8 f4 06 ad 63 97 f1 26 bf 28 bc 81 ab df 79 ab 21 bd 39 d3 f0 3d 59 f7 e4 f9 65 a5 4f 6c 86 c5 33 84 bc b9 23 07 c1 46 42 95 d3 86 33 58 de c1 a4 92 6f 99 97 d5 87 6c 3e f0 a6 23 b7 5d c9 32 5c ea fb cc 6e 78 a0 0d f8 a7 c8 34 0b 02 03 01 00 01 a3 82 01 3f 30 82 01 3b 30 1d 06 03 55 1d 0e 04 16 04 14 63 65 78 1b a9 5f 58 05 2d a2 9c ca 17 d2 01 9f 90 f9 89 bd 30 82 01 0a 06 03 55 1d 23 04 82 01 01 30 81 fe 80 14 63 65 78 1b a9 5f 58 05 2d a2 9c ca 17 d2 01 9f 90 f9 89 bd a1 81 da a4 81 d7 30 81 d4 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 43 61 6c 69 66 6f 72 6e 69 61 31 12 30 10 06 03 55 04 07 13 09 43 75 70 65 72 74 69 6e 6f 31 1d 30 1b 06 03 55 04 0a 13 14 41 70 70 6c 65 20 43 6f 6d 70 75 74 65 72 2c 20 49 6e 63 2e 31 1d 30 1b 06 03 55 04 0b 13 14 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 31 33 30 31 06 03 55 04 03 13 2a 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 31 29 30 27 06 09 2a 86 48 86 f7 0d 01 09 01 16 1a 61 64 6d 69 6e 40 6f 70 65 6e 73 6f 75 72 63 65 2e 61 70 70 6c 65 2e 63 6f 6d 82 09 00 d5 a3 99 c3 69 dc 60 e4 30 0c 06 03 55 1d 13 04 05 30 03 01 01 ff 30 0d 06 09 2a 86 48 86 f7 0d 01 01 04 05 00 03 82 01 01 00 83 3e 2d ca 18 52 07 9c 6c 24 07 b4 cb c6 c0 ad 05 91 02 94 5d ab 60 2c 94 24 68 86 e2 6a f6 76 ef 5a ee 39 04 9d 91 34 1a 18 58 0a b0 0d 3d a3 76 ef 6c f3 f8 d5 47 b3 ec 5b ae 8e cf 2e 85 a0 22 c5 a7 e0 af 4f f5 59 49 53 cc 3a 54 8a 0a b5 25 50 5d 33 22 90 19 ec a0 4f 0d 47 4f f4 1d 14 bf 56 2e 75 62 f9 3a 1d 1d 0b e5 9e 25 4c 42 85 40 a0 3c 2a 23 79 ec 8b fd 77 5e 62 13 55 ac 8e 33 2b 76 49 cf 86 f9 ab 16 25 1d 59 95 22 ed 7d 52 5c 2b 06 00 a3 84 39 2c 7d be 3f bf d3 cd 58 3d 7d b4 1a 35 1b ba 1d ba 0a 2e 8d d6 bf d1 69 03 f1 a0 bf 7c 88 00 24 c0 07 74 6b 05 82 8d 62 fc 00 c5 f5 e3 d8 49 56 b1 0e 78 df a4 37 7f 57 e0 17 b2 c6 c4 c5 16 61 15 73 ab 58 ea 7b 03 b0 89 ba 0f 96 b5 fb d5 e9 92 5a 46 0e 86 d5 33 83 c8 90 f7 d1 fd 8f cd 2f 4f c2 21 b9 6f c5 aa ac depth=1 /C=US/ST=California/L=Cupertino/O=Apple Computer, Inc./ OU=opensource.apple.com/CN=opensource.apple.com certificate authority/ emailAddress=admin@opensource.apple.com verify error:num=19:self signed certificate in certificate chain verify return:0 <<< TLS 1.0 Handshake [length 018d], ServerKeyExchange 0c 00 01 89 00 80 d6 7d e4 40 cb bb dc 19 36 d6 93 d3 4a fd 0a d5 0c 84 d2 39 a4 5f 52 0b b8 81 74 cb 98 bc e9 51 84 9f 91 2e 63 9c 72 fb 13 b4 b4 d7 17 7e 16 d5 5a c1 79 ba 42 0b 2a 29 fe 32 4a 46 7a 63 5e 81 ff 59 01 37 7b ed dc fd 33 16 8a 46 1a ad 3b 72 da e8 86 00 78 04 5b 07 a7 db ca 78 74 08 7d 15 10 ea 9f cc 9d dd 33 05 07 dd 62 db 88 ae aa 74 7d e0 f4 d6 e2 bd 68 b0 e7 39 3e 0f 24 21 8e b3 00 01 02 00 80 9b 09 aa c7 c9 e2 f5 74 23 2f e1 e3 0b 7e c0 95 2a a5 1c 48 c8 4b 98 d9 79 08 bf 7f ce 9e 2b 1e 79 fd 32 37 ce 83 67 61 4c dc bd ff e0 32 f1 c9 4b ee 11 0f 59 4c 2f 4d 39 b4 3e 28 fb e1 ac 83 a3 28 19 54 20 f5 5f 16 83 f9 8e 93 5a 2d 78 41 44 84 2d bf 3c a9 02 61 6e 9b 1e 65 dd af e1 26 75 8c 54 3a 1b 70 a1 0a 32 89 87 e8 6c 46 67 6e 6f 83 2e a0 85 74 6e 47 52 c0 9f fc fd 7c 0d 97 00 80 3f 2e b0 8e 6b 1c 1e 26 90 a9 6a 3a ba 21 d6 55 76 bb 7a e5 24 33 4e da 1c 31 73 45 71 64 9b 1c 24 5a e3 1d 94 44 8e 37 12 cf 53 0e 41 a1 3e 8d 6f f0 04 37 32 73 67 2d 52 aa c0 2c d3 0a fd a6 94 52 a2 66 98 45 58 3a 1f b8 af 88 23 a2 2d fc 2b 13 4c 3b 65 48 c6 51 d2 54 0a 2c 5a 21 21 41 c0 7a 4e 41 1f d6 c6 b5 9a c2 9b 5a 78 bd 2c c5 64 98 73 f3 54 c1 7d ac 1c de c7 44 0e 2c 27 8e <<< TLS 1.0 Handshake [length 0004], ServerHelloDone 0e 00 00 00 TLS 1.0 Handshake [length 0086], ClientKeyExchange 10 00 00 82 00 80 87 bd a8 fd 1a 40 5b 34 c9 37 7c 8f 4e b3 b4 10 70 b1 6a f2 76 d4 b6 0f 9b 2a c8 86 1a 8a 18 a6 b1 04 e6 74 be 6f 7e 4c 0a 01 22 22 1b e2 d3 ca 65 20 84 4a 36 6e 32 fd 1b 8c ac 5a dc 0d 68 03 31 10 70 71 7a 8c fc 01 12 b2 ee 28 6d 36 19 43 65 d8 12 16 5e ef 0d f9 1e 27 81 3c 17 0e 27 0b c7 13 96 96 bc 5b a1 ae 4b 99 24 8b 18 ee 53 19 46 7c 6b e3 cc 1e 70 b8 63 5b 27 e9 77 2c 23 11 TLS 1.0 ChangeCipherSpec [length 0001] 01 TLS 1.0 Handshake [length 0010], Finished 14 00 00 0c 79 eb 9e df db 6a 3a 8d f3 cf 84 23 <<< TLS 1.0 Alert [length 0002], fatal bad_record_mac 02 14 7060:error:140943FC:SSL routines:SSL3_READ_BYTES:sslv3 alert bad record mac:s3_pkt.c:1057:SSL alert number 20 7060:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:s3_pkt.c:534:

-- Daniel J. Luke +========================================================+ | *---------------- dluke@geeklair.net ----------------* | | *-------------- http://www.geeklair.net -------------* | +========================================================+ | Opinions expressed are mine and do not necessarily | | reflect the opinions of my employer. | +========================================================+

On Sep 26, 2006, at 3:20 PM, Daniel J. Luke wrote:

I should note that this is with openssl 0.9.8c, so far I haven't been able to reproduce with the 10.4 supplied openssl 0.9.7i command.

(and it looks like svn.macports.org says it's running openssl 0.9.8b, so perhaps it's a 0.9.8b <-> 0.9.8c issue?)

I think it might be related to the padding bug change in 0.9.8c (see http://www.aet.tu-cottbus.de/rt2/Ticket/Display.html?id=1204 and http://www.gatago.com/mailing/openssl/users/15655836.html) http://www.openssl.org/news/changelog.html says: "Disable the padding bug check when compression is in use. The padding bug check assumes the first packet is of even length, this is not necessarily true if compresssion is enabled and can result in false positives causing handshake failure. The actual bug test is ancient code so it is hoped that implementations will either have fixed it by now or any which still have the bug do not support compression. [Steve Henson]" -- Daniel J. Luke +========================================================+ | *---------------- dluke@geeklair.net ----------------* | | *-------------- http://www.geeklair.net -------------* | +========================================================+ | Opinions expressed are mine and do not necessarily | | reflect the opinions of my employer. | +========================================================+