[squeak-dev] SSL/Socket error code interpretation

gettimothy gettimothy at zoho.com
Tue May 12 11:30:23 UTC 2020


Check your systems time.

My 32 bit machine loses date time on loss of power.

During squeak install preference wizard at step to optionally load git, osprocess, ffi, etc, the yes button is disabled with a warning message.

Set system date time with nntp calls and it works.


---- On Mon, 11 May 2020 21:48:37 -0400 tim at rowledge.org wrote ----


I'm trying to make an https connection to a site and it isn't a happy thing.

After digging further into the SSL plugin than I ever wanted I found the logLevel setting and set it to 1 in SecureSocketStream>>#sslConnectTo: and got some plausibly useful info out of it.
The key item seems to be
sqConnectSSL: SSL_get_verify_result = 20
and if I've interpreted the code in ~opensmalltalk-vm/platforms/unix/plugins/SqueakSSL/sqUnixOpenSSL.inc and opensmalltalk-vm/platforms/Cross/plugins/SqueakSSL/SqueakSSL.h properly then an error code of 20 means SQSSL_INVALID_CN and SQSSL_CERT_EXPIRED.

Can anyone reassure me or correct me on that?

The problem is that according to the SSL code in *VW* the certificate I get has this info -
Validity
    Not Before: Nov 15 00:00:00 2018 GMT
    Not After: Nov 14 23:59:59 2020 GMT
Subject: OU=Domain Control Validated, OU=PositiveSSL, CN=sagetea.ai

... which looks in-date to me and a fairly reasonable CN.

Aaaargh!

tim
--
tim Rowledge; tim at rowledge.org; http://www.rowledge.org/tim
Strange OpCodes: FR: Flip Record



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squeakfoundation.org/pipermail/squeak-dev/attachments/20200512/52d71ac7/attachment-0001.html>


More information about the Squeak-dev mailing list