headers
Guido Berhoerster | 6 Apr 2010 12:15

Problems with slrn and nss-compat-ossl

Hello,

I have two issues with slrn 0.9.9p1 using nss-compat-ossl.

First, slrn exits without an error message when the NSS db in
legacy BDB format does not exist (i.e. cert8.db and key3.db),
openSUSE only provides a newer variant in SQLite format.

The second problem is that SSL connections tend to stall randomly
when fetching the list of groups, headers or an article after
reading a certain amount of data.
--debug doesn't show anything unusual execpt the error message,
e.g. "!Disconnecting from server. !Closing the server
connection.". This is not due to server issues, it happens to me
on at least three different servers (news.arcor.de,
nttp.aioe.org, and secnews.netscape.com) and only when using SSL.

This is on openSUSE 11.2 and Factory which comes with NSS 3.12.4
and nss-compat-ossl 0.9.2.

--

-- 
Guido Berhoerster

------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
(Continue reading)

Permalink | Reply | 2 comments |
headers
Guido Berhoerster | 12 Apr 2010 20:54

Re: Problems with slrn and nss-compat-ossl

For testing purposes I have compiled slrn with gnutls- and
openssl-support.

With gnutls 2.8.5 I cannot make SSL connections at all, slrn
fails with the following error messages:
----8<----
Failed to initialize server
Reason:
slrn fatal error:
Failed to initialize server.
---->8----

----8<----
Unexpected error: SSL connection closed

A TLS fatal alert has been received.

SSL_connect failed

slrn fatal error:
Failed to initialize server.
---->8----

Using OpenSSL SSL connections work flawlessly.  So it seems that
both gnutls- and nss-support is broken which is very unfortunate
since it means that it is not possible to get a
redistributable binary package of slrn with working SSL support.

--

-- 
Guido Berhoerster
(Continue reading)

Permalink | Reply | 1 comment |
headers
John E. Davis | 14 Apr 2010 22:37
Picon
Favicon

Re: Problems with slrn and nss-compat-ossl

Guido Berhoerster <guido+slrn <at> berhoerster.name> wrote:
> Using OpenSSL SSL connections work flawlessly.  So it seems that
> both gnutls- and nss-support is broken which is very unfortunate
> since it means that it is not possible to get a
> redistributable binary package of slrn with working SSL support.

I will look into it.

Thanks,
--John

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
Permalink | Reply | 0 comments |

Gmane