[squeak-dev] Strange SSL error

Phil B pbpublist at gmail.com
Fri Dec 30 00:26:01 UTC 2016

I've been seeing this and other SSL errors more frequently as well
recently.  Keep in mind that a lot of people enabling SSL via services like
Let's Encrypt have probably never done it before so there very well may be
configuration issues such as
(note that this is an old issue but who knows what combination of OS/SSL
are running on some of these servers)

On Dec 27, 2016 11:07 AM, "Levente Uzonyi" <leves at caesar.elte.hu> wrote:

> Hi Chris,
> This is probably an issue with SAN certificates. The sites you're trying
> to access probably have changed to SAN certificates or changed the order of
> the domain names listed in them.
> If this is the case, then you might want to check your code with the
> solution I posted here[1]. Note that it has been scraped in favor of
> plugin-side certificate verification, but that hasn't been implemented yet.
> Levente
> [1] http://forum.world.st/SqueakSSL-SAN-certificates-td4828767.html
> On Mon, 26 Dec 2016, Chris Muller wrote:
> An application I've been running for a couple of years has started
>> failing when trying to use WebClient.  I see a lot of instances of
>> this error in the console:
>> 4149581508:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown
>> protocol:../../ssl/s23_clnt.c:531
>> Is this a SqueakSSL issue?  I have two versions of the SqueakSSL
>> plugin, one is < 100K the other is > 8.9MB from April, 2015, which I
>> think is Levente's statically-linked one.
>> The app needs to access various API's and scrape various web sites.
>> Any ideas on this error and what should I be running these days for
>> SqueakSSL?
>> thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squeakfoundation.org/pipermail/squeak-dev/attachments/20161229/ebd37545/attachment.html>

More information about the Squeak-dev mailing list