[squeak-dev] SSL/Socket error code interpretation

tim Rowledge tim at rowledge.org
Tue May 12 01:48:37 UTC 2020


I'm trying to make an https connection to a site and it isn't a happy thing.

After digging further into the SSL plugin than I ever wanted  I found the logLevel setting and set it to 1 in SecureSocketStream>>#sslConnectTo: and got some plausibly useful info out of it.
The key item seems to be 
sqConnectSSL: SSL_get_verify_result = 20
and if I've interpreted the code in ~opensmalltalk-vm/platforms/unix/plugins/SqueakSSL/sqUnixOpenSSL.inc and opensmalltalk-vm/platforms/Cross/plugins/SqueakSSL/SqueakSSL.h properly then an error code of 20 means SQSSL_INVALID_CN and SQSSL_CERT_EXPIRED. 

Can anyone reassure me or correct me on that?

The problem is that according to the SSL code in *VW* the certificate I get has this info - 
Validity
	Not Before: Nov 15 00:00:00 2018 GMT
	Not After: Nov 14 23:59:59 2020 GMT
Subject: OU=Domain Control Validated, OU=PositiveSSL, CN=sagetea.ai

... which looks in-date to me and a fairly reasonable CN. 

Aaaargh!

tim
--
tim Rowledge; tim at rowledge.org; http://www.rowledge.org/tim
Strange OpCodes: FR: Flip Record




More information about the Squeak-dev mailing list