SSL_connect SYSCALL 返回=5 errno=0 state=SSLv2/v3 读取服务器hello A [英] SSL_connect SYSCALL returned=5 errno=0 state=SSLv2/v3 read server hello A

问题描述

我有一个使用 IMAP & 连接到交换服务器的 ruby​​ 客户端.SSL.我使用 Ruby Net::IMAP 库(在后台使用 openssl)进行连接.几个月来一直工作正常.交换服务器管理员从 godaddy 安装了新证书，现在我收到此错误:

I have a ruby client that connects to an exchange server using IMAP & SSL. I use the Ruby Net::IMAP library (which uses openssl under the covers) to connect. Its been working fine for months. The exchange server admin installed new cert from godaddy and now I get this error:

 SSL_connect SYSCALL returned=5 errno=0 state=SSLv2/v3 read server hello A

有谁知道这个错误是什么意思?(我试过谷歌搜索)

Does anyone know what this error means? (I tried googling)

我怀疑新证书存在问题，但我不知道如何解决它.

I suspect there is an issue with the new cert causing this, but I dont know how to troubleshoot it.

另外我知道你可以在使用 NET:HTTP 时禁用证书验证:

Also I know you can disable certificate verification when using NET:HTTP by doing:

 http.verify_mode = OpenSSL::SSL::VERIFY_NONE if http.use_ssl?

但我不知道如何使用 NET:IMAP 执行此操作.我想禁用它，看看这是否是问题所在.

but I cant figure out how to do this using NET:IMAP. I want to disable this to see if this is the problem.

至于我使用的代码:我正在使用这个(或非常接近这个)http://github.com/look/fetcher/blob/master/lib/fetcher/imap.rb

As for code im using: Im using this(or very close to this) http://github.com/look/fetcher/blob/master/lib/fetcher/imap.rb

我尝试更改为:@connection = Net::IMAP.new(@server, @port, @ssl, nil, false)

I tried changing to : @connection = Net::IMAP.new(@server, @port, @ssl, nil, false)

这是堆栈跟踪

 checking emails on: Tue Aug 17 20:48:01 +0000 2010
 rake aborted!
 SSL_connect SYSCALL returned=5 errno=0 state=SSLv2/v3 read server hello A
 /usr/lib/ruby/1.8/net/imap.rb:904:in `connect'
 /usr/lib/ruby/1.8/net/imap.rb:904:in `initialize' 
 /u/apps/aras/releases/20100728212439/vendor/plugins/fetcher/lib/fetcher/imap.rb:34:in `new'
 /u/apps/aras/releases/20100728212439/vendor/plugins/fetcher/lib/fetcher/imap.rb:34:in `establish_connection'
 /usr/lib/ruby/gems/1.8/gems/system_timer-1.0/lib/system_timer.rb:28:in `timeout_after'
 /u/apps/aras/releases/20100728212439/vendor/plugins/fetcher/lib/fetcher/imap.rb:33:in `establish_connection'
 /u/apps/aras/releases/20100728212439/vendor/plugins/fetcher/lib/fetcher/base.rb:31:in `fetch'

推荐答案

原来这个问题的根本原因是 ms exchange 配置错误.我很想了解更多关于 ssl 错误以及如何解决它们的信息，但我没有得到太多这方面的信息.

Well it turns out the root cause on this one was ms exchange was misconfigured. I would love to have learned more about ssl errors and how to troublshoot them, but I just didnt get much info on this.

我确实尝试过使用 open ssl 解决此问题，仅供参考，您可以这样做:OpenSSL> s_client -connect myserver:993

I did try to just troublshoot this using open ssl, fyi, you can do: OpenSSL> s_client -connect myserver:993

当它被破坏时，我收到了这个错误:已连接(00000003)26831:错误:140790E5:SSL 例程:SSL23_WRITE:ssl 握手失败:s23_lib.c:188:

When it was broken, I received this error: CONNECTED(00000003) 26831:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

我们修好后，我收到了证书和握手消息等.

Once we fixed I got a cert and handshake message etc.

这是我的交换管理员所说的:我刚刚转到 IMAP 协议并转到访问选项卡.然后是证书按钮.从那里我选择替换证书并选择新证书."

Here is what my exchange admin said he did: "I just went to the IMAP protocol and went to the access tab. Then the certificates button. From there I chose to replace the cert and chose the new cert."

这篇关于SSL_connect SYSCALL 返回=5 errno=0 state=SSLv2/v3 读取服务器hello A的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！