• TLS errors...

    From Bill McGarrity@1:103/705 to All on Mon Sep 10 00:46:05 2018
    Hiya All...

    Can anyone explain the following:

    9/10 12:39:03a TLS ERROR 'Operation failed' (-15) setting attribute 6001
    9/10 12:39:03a 1692 TLS ERROR 'Operation failed' (-15) setting session active
    9/10 12:39:06a TLS WARNING 'Server provided a broken/invalid
    certificate, try again with a reduced level of certificate compliance
    checking' (-32) setting attribute 6001
    9/10 12:39:06a 1724 TLS WARNING 'Server provided a broken/invalid certificate, try again with a reduced level of certificate compliance
    checking' (-32) setting session active
    9/10 12:39:06a TLS WARNING 'Server provided a broken/invalid
    certificate, try again with a reduced level of certificate compliance
    checking' (-32) setting attribute 6001
    9/10 12:39:06a 1724 TLS WARNING 'Server provided a broken/invalid certificate, try again with a reduced level of certificate compliance
    checking' (-32) setting session active


    I don't use letsencrypt and from what I can gather, my ssl.cert is up to
    date.

    Any thoughts?

    Thanks...

    --

    Bill

    Telnet: tequilamockingbirdonline.net
    Web: bbs.tequilamockingbirdonline.net
    FTP: ftp.tequilamockingbirdonline.net:2121
    IRC: irc.tequilamockingbirdonline.net Ports: 6661-6670 SSL: 6697
    Radio: radio.tequilamockingbirdonline.net:8010/live

    ---
    * Synchronet * TequilaMockingbird Online - Toms River, NJ
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Digital Man@1:103/705 to Bill McGarrity on Mon Sep 10 00:31:11 2018
    Re: TLS errors...
    By: Bill McGarrity to All on Mon Sep 10 2018 12:46 am

    Hiya All...

    Can anyone explain the following:

    9/10 12:39:03a TLS ERROR 'Operation failed' (-15) setting attribute 6001
    9/10 12:39:03a 1692 TLS ERROR 'Operation failed' (-15) setting session active
    9/10 12:39:06a TLS WARNING 'Server provided a broken/invalid certificate, try again with a reduced level of certificate compliance checking' (-32) setting attribute 6001
    9/10 12:39:06a 1724 TLS WARNING 'Server provided a broken/invalid certificate, try again with a reduced level of certificate compliance checking' (-32) setting session active
    9/10 12:39:06a TLS WARNING 'Server provided a broken/invalid certificate, try again with a reduced level of certificate compliance checking' (-32) setting attribute 6001
    9/10 12:39:06a 1724 TLS WARNING 'Server provided a broken/invalid certificate, try again with a reduced level of certificate compliance checking' (-32) setting session active


    I don't use letsencrypt and from what I can gather, my ssl.cert is up to date.

    Any thoughts?

    When do these messages occur? I'm thinking these look like TLS client errors (outbound connections, so from a .js module running as logon event?).

    digital man

    Synchronet "Real Fact" #36:
    Synchronet's Windows DLLs are built with Microsoft Visual Studio/C++.
    Norco, CA WX: 66.9oF, 85.0% humidity, 0 mph SSE wind, 0.00 inches rain/24hrs --- SBBSecho 3.06-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Bill McGarrity@1:266/404 to Digital Man on Tue Sep 11 15:50:00 2018
    Digital Man wrote to Bill McGarrity on 09-10-18 00:31 <=-

    Re: TLS errors...
    By: Bill McGarrity to All on Mon Sep 10 2018 12:46 am

    Hiya All...

    Can anyone explain the following:

    9/10 12:39:03a TLS ERROR 'Operation failed' (-15) setting attribute 6001
    9/10 12:39:03a 1692 TLS ERROR 'Operation failed' (-15) setting session active
    9/10 12:39:06a TLS WARNING 'Server provided a broken/invalid certificate, try again with a reduced level of certificate compliance checking' (-32) setting attribute 6001
    9/10 12:39:06a 1724 TLS WARNING 'Server provided a broken/invalid certificate, try again with a reduced level of certificate compliance checking' (-32) setting session active
    9/10 12:39:06a TLS WARNING 'Server provided a broken/invalid certificate, try again with a reduced level of certificate compliance checking' (-32) setting attribute 6001
    9/10 12:39:06a 1724 TLS WARNING 'Server provided a broken/invalid certificate, try again with a reduced level of certificate compliance checking' (-32) setting session active


    I don't use letsencrypt and from what I can gather, my ssl.cert is up to date.

    Any thoughts?

    When do these messages occur? I'm thinking these look like TLS client errors (outbound connections, so from a .js module running as logon event?).


    OK... did some research and found the error occurs when the 'web_feed_importer.js' runs. This event runs every 30 minutes and returns a 0 after it finishes.

    It doesn't seem to be interfering with anything but just found it strange it popped up suddenly.

    Hope this helps...

    Thanks...



    --

    Bill

    Telnet: tequilamockingbirdonline.net
    Web: bbs.tequilamockingbirdonline.net
    FTP: ftp.tequilamockingbirdonline.net:2121
    IRC: irc.tequilamockingbirdonline.net Ports: 6661-6670 SSL: +6697
    Radio: radio.tequilamockingbirdonline.net:8010/live


    ... Look Twice... Save a Life!!! Motorcycles are Everywhere!!!
    --- MultiMail/Win32 v0.50
    * Origin: TequilaMockingbird Online - Toms River, NJ (1:266/404)
  • From echicken@1:103/705 to Bill McGarrity on Tue Sep 11 19:59:13 2018
    Re: TLS errors...
    By: Bill McGarrity to Digital Man on Tue Sep 11 2018 15:50:00

    OK... did some research and found the error occurs when the 'web_feed_importer.js' runs. This event runs every 30 minutes and returns a 0 after it finishes.

    So this was from your Events log. Do any of the URLs to your subscribed feeds begin with 'https'? If there are several, you might want to comment them out until the error message goes away; that should identify which one is causing the error.

    ---
    echicken
    electronic chicken bbs - bbs.electronicchicken.com - 416-273-7230
    * Synchronet * electronic chicken bbs - bbs.electronicchicken.com
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Bill McGarrity@1:266/404 to echicken on Wed Sep 12 03:43:00 2018
    Hiya echicken..

    echicken wrote to Bill McGarrity on 09-11-18 19:59 <=-

    Re: TLS errors...
    By: Bill McGarrity to Digital Man on Tue Sep 11 2018 15:50:00

    OK... did some research and found the error occurs when the 'web_feed_importer.js' runs. This event runs every 30 minutes and returns a 0 after it finishes.

    So this was from your Events log. Do any of the URLs to your
    subscribed feeds begin with 'https'? If there are several, you might
    want to comment them out until the error message goes away; that should identify which one is causing the error.

    OK... I have eight different feeds using https. These are the two that are causing that error message:

    https://www.fifa.com/rss/index.xml https://feeds.feedburner.com/aflcomau?format=xml

    I've commented these out for now until you look at the pages and possibly come up with a resolve.

    Thanks..



    --

    Bill

    Telnet: tequilamockingbirdonline.net
    Web: bbs.tequilamockingbirdonline.net
    FTP: ftp.tequilamockingbirdonline.net:2121
    IRC: irc.tequilamockingbirdonline.net Ports: 6661-6670 SSL: +6697
    Radio: radio.tequilamockingbirdonline.net:8010/live


    ... Look Twice... Save a Life!!! Motorcycles are Everywhere!!!
    --- MultiMail/Win32 v0.50
    * Origin: TequilaMockingbird Online - Toms River, NJ (1:266/404)
  • From echicken@1:103/705 to Bill McGarrity on Wed Sep 12 11:33:13 2018
    Re: TLS errors...
    By: Bill McGarrity to echicken on Wed Sep 12 2018 03:43:00

    I get different errors for one vs. the other:

    https://www.fifa.com/rss/index.xml

    TLS ERROR 'Operation failed' (-15) setting attribute 6001
    0004 TLS ERROR 'Operation failed' (-15) setting session active

    https://feeds.feedburner.com/aflcomau?format=xml

    TLS WARNING 'Server provided a broken/invalid certificate, try again with a reduced level of certificate compliance checking' (-32) setting attribute 6001 0004 TLS WARNING 'Server provided a broken/invalid certificate, try again with a reduced level of certificate compliance checking' (-32) setting session active

    I've commented these out for now until you look at the pages and possibly come up with a resolve.

    According to https://www.ssllabs.com/ssltest/ both of those sites should be okay, but Synchronet and/or cryptlib doesn't like them. Perhaps DigitalMan will have some thoughts on this. (My testing doesn't involve web-feed-importer, I'm just using http.js in a simple script.)

    ---
    echicken
    electronic chicken bbs - bbs.electronicchicken.com - 416-273-7230
    * Synchronet * electronic chicken bbs - bbs.electronicchicken.com
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Bill McGarrity@1:266/404 to echicken on Wed Sep 12 12:01:45 2018
    Re: TLS errors...
    By: echicken to Bill McGarrity on Wed Sep 12 2018 11:33:13

    HIya echicken...

    According to https://www.ssllabs.com/ssltest/ both of those sites
    should be okay, but Synchronet and/or cryptlib doesn't like them.
    Perhaps DigitalMan will have some thoughts on this. (My testing
    doesn't involve web-feed-importer, I'm just using http.js in a simple script.)

    OK.... Let's see what input DM has on this...

    Thank you..

    --

    Bill

    Telnet: tequilamockingbirdonline.net
    Web: bbs.tequilamockingbirdonline.net
    FTP: ftp.tequilamockingbirdonline.net:2121
    IRC: irc.tequilamockingbirdonline.net Ports: 6661-6670 SSL: 6697
    Radio: radio.tequilamockingbirdonline.net:8010/live
    --- SBBSecho 3.06-Win32
    * Origin: TequilaMockingbird Online - Toms River, NJ (1:266/404)
  • From Digital Man@1:103/705 to echicken on Wed Sep 12 11:01:18 2018
    Re: TLS errors...
    By: echicken to Bill McGarrity on Wed Sep 12 2018 11:33 am

    According to https://www.ssllabs.com/ssltest/ both of those sites should be okay, but Synchronet and/or cryptlib doesn't like them. Perhaps DigitalMan will have some thoughts on this. (My testing doesn't involve web-feed-importer, I'm just using http.js in a simple script.)

    TLS/https is more Deuce's domain (he's the one that has done 99% of that work in Synchronet) - so... perhaps log an "issue" at https://github.com/RealDeuce/cvs-synchronet-src

    digital man

    Synchronet/BBS Terminology Definition #27:
    HTTP = Hypertext Transfer Protocol
    Norco, CA WX: 73.4oF, 71.0% humidity, 0 mph WNW wind, 0.00 inches rain/24hrs --- SBBSecho 3.06-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)