SSL_connect SYSCALL 返回=5 errno=0 state=SSLv2/v3 读取服务器hello A [英] SSL_connect SYSCALL returned=5 errno=0 state=SSLv2/v3 read server hello A
问题描述
我有一个使用 IMAP & 连接到交换服务器的 ruby 客户端.SSL.我使用 Ruby Net::IMAP 库(在后台使用 openssl)进行连接.几个月来一直工作正常.交换服务器管理员从 godaddy 安装了新证书,现在我收到此错误:
I have a ruby client that connects to an exchange server using IMAP & SSL. I use the Ruby Net::IMAP library (which uses openssl under the covers) to connect. Its been working fine for months. The exchange server admin installed new cert from godaddy and now I get this error:
SSL_connect SYSCALL returned=5 errno=0 state=SSLv2/v3 read server hello A
有谁知道这个错误是什么意思?(我试过谷歌搜索)
Does anyone know what this error means? (I tried googling)
我怀疑新证书存在问题,但我不知道如何解决它.
I suspect there is an issue with the new cert causing this, but I dont know how to troubleshoot it.
另外我知道你可以在使用 NET:HTTP 时禁用证书验证:
Also I know you can disable certificate verification when using NET:HTTP by doing:
http.verify_mode = OpenSSL::SSL::VERIFY_NONE if http.use_ssl?
但我不知道如何使用 NET:IMAP 执行此操作.我想禁用它,看看这是否是问题所在.
but I cant figure out how to do this using NET:IMAP. I want to disable this to see if this is the problem.
至于我使用的代码:我正在使用这个(或非常接近这个)http://github.com/look/fetcher/blob/master/lib/fetcher/imap.rb
As for code im using: Im using this(or very close to this) http://github.com/look/fetcher/blob/master/lib/fetcher/imap.rb
我尝试更改为:@connection = Net::IMAP.new(@server, @port, @ssl, nil, false)
I tried changing to : @connection = Net::IMAP.new(@server, @port, @ssl, nil, false)
这是堆栈跟踪
checking emails on: Tue Aug 17 20:48:01 +0000 2010
rake aborted!
SSL_connect SYSCALL returned=5 errno=0 state=SSLv2/v3 read server hello A
/usr/lib/ruby/1.8/net/imap.rb:904:in `connect'
/usr/lib/ruby/1.8/net/imap.rb:904:in `initialize'
/u/apps/aras/releases/20100728212439/vendor/plugins/fetcher/lib/fetcher/imap.rb:34:in `new'
/u/apps/aras/releases/20100728212439/vendor/plugins/fetcher/lib/fetcher/imap.rb:34:in `establish_connection'
/usr/lib/ruby/gems/1.8/gems/system_timer-1.0/lib/system_timer.rb:28:in `timeout_after'
/u/apps/aras/releases/20100728212439/vendor/plugins/fetcher/lib/fetcher/imap.rb:33:in `establish_connection'
/u/apps/aras/releases/20100728212439/vendor/plugins/fetcher/lib/fetcher/base.rb:31:in `fetch'
推荐答案
原来这个问题的根本原因是 ms exchange 配置错误.我很想了解更多关于 ssl 错误以及如何解决它们的信息,但我没有得到太多这方面的信息.
Well it turns out the root cause on this one was ms exchange was misconfigured. I would love to have learned more about ssl errors and how to troublshoot them, but I just didnt get much info on this.
我确实尝试过使用 open ssl 解决此问题,仅供参考,您可以这样做:OpenSSL> s_client -connect myserver:993
I did try to just troublshoot this using open ssl, fyi, you can do: OpenSSL> s_client -connect myserver:993
当它被破坏时,我收到了这个错误:已连接(00000003)26831:错误:140790E5:SSL 例程:SSL23_WRITE:ssl 握手失败:s23_lib.c:188:
When it was broken, I received this error: CONNECTED(00000003) 26831:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:
我们修好后,我收到了证书和握手消息等.
Once we fixed I got a cert and handshake message etc.
这是我的交换管理员所说的:我刚刚转到 IMAP 协议并转到访问选项卡.然后是证书按钮.从那里我选择替换证书并选择新证书."
Here is what my exchange admin said he did: "I just went to the IMAP protocol and went to the access tab. Then the certificates button. From there I chose to replace the cert and chose the new cert."
这篇关于SSL_connect SYSCALL 返回=5 errno=0 state=SSLv2/v3 读取服务器hello A的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!