Bug #95981 for IO-Socket-SSL: libio-socket-ssl-perl: duplicate "did not receive the required stapled OCSP response" in error message

Mon May 26 14:52:45 2014 gregoa [...] cpan.org - Ticket created

From:	gregoa [...] cpan.org
Subject:	libio-socket-ssl-perl: duplicate "did not receive the required stapled OCSP response" in error message

This bug has been forwarded from http://bugs.debian.org/749212 -->-->-->-->-->-->-->-->-->-->-->-->-->-->-->-->-->-->-->--> From: Jakub Wilk <jwilk@debian.org> To: Debian Bug Tracking System <submit@bugs.debian.org> Subject: libio-socket-ssl-perl: duplicate "did not receive the required stapled OCSP response" in error message Date: Sun, 25 May 2014 09:07:21 +0200 Package: libio-socket-ssl-perl Version: 1.988-1 Severity: minor $ perl test-connect.pl www.debian.org IO::Socket::IP configuration failed did not receive the required stapled OCSP response did not receive the required stapled OCSP response at test-connect.pl line 8. <--<--<--<--<--<--<--<--<--<--<--<--<--<--<--<--<--<--<--<-- (test-connect.pl can be found at above mentioned URL; and also an output of a run where the error output is repeated more than twice.) Thanks in advance, gregor herrmann, Debian Perl Group

Mon May 26 15:53:37 2014 Steffen_Ullrich [...] genua.de - Correspondence added

Am Mo 26. Mai 2014, 14:52:45, GREGOA schrieb: Show quoted text

> This bug has been forwarded from http://bugs.debian.org/749212 > > ... > (test-connect.pl can be found at above mentioned URL; and also an > output of > a run where the error output is repeated more than twice.)

This is due to the underlying IO::Socket::IP, which retries connection for each possible IP until it succeeds, which will collect the errors for all the retries. I think this is a bug in IO::Socket::IP, which should only retry until it got a successful connection at IP level and should not care if it was also successful on the SSL layer. I've failed a bug #95983 for IO::Socket::IP and will reject this one. To work around you can first create the socket connection with IO::Socket::IP->new and after a successful IP connection you can upgrade with start_SSL to SSL.

Mon May 26 15:53:37 2014 The RT System itself - Status changed from 'new' to 'open'

Mon May 26 15:53:38 2014 Steffen_Ullrich [...] genua.de - Status changed from 'open' to 'rejected'

Mon May 26 17:17:10 2014 gregoa [...] debian.org - Correspondence added

Subject:	Re: [rt.cpan.org #95981] libio-socket-ssl-perl: duplicate "did not receive the required stapled OCSP response" in error message
Date:	Mon, 26 May 2014 23:16:51 +0200
To:	Steffen Ullrich via RT <bug-IO-Socket-SSL [...] rt.cpan.org>
From:	gregor herrmann <gregoa [...] debian.org>

On Mon, 26 May 2014 15:53:38 -0400, Steffen Ullrich via RT wrote: Show quoted text

> > (test-connect.pl can be found at above mentioned URL; and also an > > output of > > a run where the error output is repeated more than twice.)

> > This is due to the underlying IO::Socket::IP, which retries connection for each possible IP until it succeeds, which will collect the errors for all the retries. > I think this is a bug in IO::Socket::IP, which should only retry until it got a successful connection at IP level and should not care if it was also successful on the SSL layer.

Ah, I see. Show quoted text

> I've failed a bug #95983 for IO::Socket::IP and will reject this one. > To work around you can first create the socket connection with IO::Socket::IP->new and after a successful IP connection you can upgrade with start_SSL to SSL.

Thanks for the explanation and for forwarding the ticket! Cheers, gregor -- .''`. Homepage: http://info.comodo.priv.at/ - OpenPGP key 0xBB3A68018649AA06 : :' : Debian GNU/Linux user, admin, and developer - http://www.debian.org/ `. `' Member of VIBE!AT & SPI, fellow of the Free Software Foundation Europe `- NP: Tom Waits: The Heart Of Saturday Night

Download signature.asc
application/pgp-signature 928b

Message body not shown because it is not plain text.