Home / user-41192

Andrew Winter's questions

Martin Hope
Andrew Winter
Asked: 2012-08-25 03:57:36 +0800 CST
  • 2

Since upgrading to Ubuntu 12.04 I've started receiving errors on SSL based curl requests to Apple's verification servers. This happens on all of my 12.04 servers.

Using this command curl -Iv https://buy.itunes.apple.com/verifyReceipt or PHP's curl library I receive this error SSL read: error:00000000:lib(0):func(0):reason(0), errno 104

Here are some details about the boxes that now fail

curl/7.22.0 libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.3.4 libidn/1.23 librtmp/2.3

The command continues to work on servers with 10.04.4 LTS

curl/7.19.7 libcurl/7.19.7 OpenSSL/0.9.8k zlib/1.2.3.3 libidn/1.15

Any help would be appreciated.

EDIT: OPENSSL output

CONNECTED(00000003)
depth=2 C = US, O = "VeriSign, Inc.", OU = VeriSign Trust Network, OU = "(c) 2006 VeriSign, Inc. - For authorized use only", CN = VeriSign Class 3 Public Primary Certification Authority - G5
verify error:num=20:unable to get local issuer certificate
verify return:0
---
Certificate chain
 0 s:/1.3.6.1.4.1.311.60.2.1.3=US/1.3.6.1.4.1.311.60.2.1.2=California/businessCategory=Private Organization/serialNumber=C0806592/C=US/postalCode=95014/ST=California/L=Cupertino/street=1 Infinite Loop/O=Apple Inc./OU=iTMS Engineering/CN=buy.itunes.apple.com
   i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)06/CN=VeriSign Class 3 Extended Validation SSL SGC CA
 1 s:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)06/CN=VeriSign Class 3 Extended Validation SSL SGC CA
   i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5
 2 s:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5
   i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority
---
Server certificate
-----BEGIN CERTIFICATE-----
*snip
-----END CERTIFICATE-----
subject=/1.3.6.1.4.1.311.60.2.1.3=US/1.3.6.1.4.1.311.60.2.1.2=California/businessCategory=Private Organization/serialNumber=C0806592/C=US/postalCode=95014/ST=California/L=Cupertino/street=1 Infinite Loop/O=Apple Inc./OU=iTMS Engineering/CN=buy.itunes.apple.com
issuer=/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)06/CN=VeriSign Class 3 Extended Validation SSL SGC CA
---
No client certificate CA names sent
---
SSL handshake has read 6686 bytes and written 536 bytes
---
New, TLSv1/SSLv3, Cipher is RC4-MD5
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1
    Cipher    : RC4-MD5
    Session-ID: 2B2D7AA20CA51CD6A0F962E7AC3F96C8B17C4CE9CEA2C386916772949693A93A
    Session-ID-ctx:
    Master-Key: A854A46411B4C710FCD822143E5EE305F2D6C4896BD4E008AD01DC31DCCAE76D9C1679184F11905C68F792A40CB56801
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1345955495
    Timeout   : 300 (sec)
    Verify return code: 20 (unable to get local issuer certificate)
---
ubuntu
Martin Hope
Andrew Winter
Asked: 2011-05-12 03:47:30 +0800 CST
  • 1

One of my clients just installed a firewall and since installing it they've been having issues uploading largish files (tested with files over 2MB ~ 200MB) to our server. The server is running Ubuntu 10.04 and Apache 2.2.14 and another test server is running Ubuntu 10.04 with Apache 2.2.16. From the clients location large uploads produce a "request failed: error reading the headers" in the error.log.

The form that's posting the large files is posting to a PHP script.

The issue started with the firewall and when the firewall is removed from the equation everything is fine, unfortunately this isn't an option.

I realize the issue might be completely related to the firewall but they're not having issues posting the same files to other sites and I'm hoping there might be something I might be able to change on my end or something more I can look for that could help alleviate this issue.

firewall apache-2.2 upload
Martin Hope
Andrew Winter
Asked: 2011-03-24 04:07:25 +0800 CST
  • 2

On two of our servers we have an Ubuntu LAMP setup with PHP code designed to allow large image and audio uploads. One of our clients is having an issue where they are unable to upload any files larger than ~4MB from any computer in their office. They get a "The connection was reset" this error in FireFox and in chrome they get "Error 101 (net::ERR_CONNECTION_RESET): Unknown error." In chrome I can watch the upload percentage and see the upload fail around the time ~4MB is reached (53%) on an 7.79MB file.

It's not a speed issue as I've successfully uploaded files from slower networks.

Apache is returning no errors in the logs, and is recording the start of the post in the access log.

The PHP.ini is set to allow files up to 500MB and we have other clients doing this with no problems. I've upped the script timeouts of PHP as well.

I've tested uploading from a number of other locations to the servers with no errors; and I've also tested uploading from the clients location to other services, also with no errors.

I'm really at a loss i can't tell if it's a server error a client and I'm hoping someone might know of something I can use to test or perhapses possibly a setting I might have missed.

php apache-2.2 upload
Martin Hope
Andrew Winter
Asked: 2010-04-22 21:17:00 +0800 CST
  • 1

I'm working with postfix on fedora 9 and I'm attempting to make some changes to a system setup by my predecessor. Currently the postfix server on [mail.ourdomain.com] is setup to forward mail sent to two addresses to another server for processing. The other server [www01.ourdomain.com] receives the email and sends it to a PHP script to be processed. Then that PHP script generates and sends a response to the user who sent the original email.

We're adding more web servers to the system and as a result we've decided to move these processing scripts to our admin [admin.ourdomain.com] server to make them easier to keep track of. I've already setup and tested the processing scripts on [admin.ourdomain.com], and on the mail server doing the forwarding [mail.ourdomain.com] I added [admin.ourdomain.com] to /etc/hosts and also added another, aside from the one for [www01.ourdomain.com], entry to /etc/postfix/transport for [admin.ourdomain.com]. I also restarted postfix as well.

I've tested the communication from [mail.ourdomain.com] to [admin.ourdomain.com] using telnet and the [admin.ourdomain.com] domain and everything runs correctly. But as soon as I change the forward address and attempt to send an email to the mail server I get a bounce message stating "Host or domain name not found. Name service error for name=admin.ourdomain.com type=A: Host not found". If I change the forward settings back to [www01.ourdomain.com] then everything works fine. Is there some setting I'm missing in Postfix? The server itself and telnet work fine it just seems to be postfix that's not able to discover the location of [admin.ourdomain.com].

email postfix