Bug 432271 - konqueror cannot connect to bugzilla - SSL negotiation failed.
Summary: konqueror cannot connect to bugzilla - SSL negotiation failed.
Alias: None
Product: Fedora
Classification: Fedora
Component: qt   
(Show other bugs)
Version: rawhide
Hardware: All
OS: Linux
Target Milestone: ---
Assignee: Ngo Than
QA Contact: Fedora Extras Quality Assurance
Keywords: Reopened
: 436974 (view as bug list)
Depends On:
TreeView+ depends on / blocked
Reported: 2008-02-10 19:33 UTC by Orion Poplawski
Modified: 2008-04-02 13:56 UTC (History)
5 users (show)

Fixed In Version: 4.3.4-10.fc9
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2008-04-02 13:49:48 UTC
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
strace of konqueror to mail.google.com (2.76 MB, application/octet-stream)
2008-04-01 19:10 UTC, Gerald Cox
no flags Details
strace of konqueror to mail.google.com (2.81 MB, application/octet-stream)
2008-04-01 19:31 UTC, Gerald Cox
no flags Details

External Trackers
Tracker ID Priority Status Summary Last Updated
KDE Software Compilation 155564 None None None Never

Description Orion Poplawski 2008-02-10 19:33:14 UTC
Description of problem:

Built a livecd from current devel.  Try to connect to
https://bugzilla.redhat.com/ in konqueror and I get:

An error occurred while loading https://bugzilla.redhat.com/:
Could not connect to host bugzilla.redhat.com: SSL negotiation failed.

Firefox connects fine.

Version-Release number of selected component (if applicable):

How reproducible:

Comment 1 Rex Dieter 2008-02-12 22:01:13 UTC
Ugh, that's supposed to be fixed in kdelibs-4.0.1-1+ builds, see also bug #429846
(or at least one other openssl-related issue).

fwiw, bugzilla.redhat.com worksforme.

Comment 2 Rex Dieter 2008-02-12 22:02:33 UTC
Does konq -> Settings -> Configure Konqueror -> WebBrowsing -> Crypto -> OpenSSL
tab, "Test" button report success or faiilure?

Comment 3 Gerald Cox 2008-02-24 19:07:48 UTC
"Test" button reports success.  Issue still exists in:

FWIW Firefox isn't working at all for me, and I'm just trying to get to work
using the Alpha distribution.  I'll look to see if a bug exists for that...

Comment 4 Orion Poplawski 2008-03-12 20:17:30 UTC
Test button works for me too.  Still cannot connect with kdebase-4.0.2-2.fc9,
just hangs forever.

Comment 5 Rex Dieter 2008-03-12 21:47:38 UTC
I (still) can't reproduce this.  WORKSFORME.

Comment 6 Gerald Cox 2008-03-12 23:47:02 UTC
Hummmmmmmm...I just tried again and it still isn't working...I have never been
able to get it to work with F9 Alpha, and I've been keeping up with updates on a
daily basis.  Rex, did you try http://mail.google.com?  When I try to connect to
that, I get:
An error occurred while loading http://mail.google.com:
Could not connect to host www.google.com: SSL negotiation failed.

and when I try bugzilla, it just hangs...

Firefox, otoh is working fine now... early on had some issues, but those have
been corrected via updates.  I'm wondering if there is any correlation with the
SSL problems with kopete?  Just a thought...

Comment 7 Rex Dieter 2008-03-13 03:03:49 UTC
both bugzilla, gmail work for me.  wierd.

Comment 8 Gerald Cox 2008-03-13 03:26:38 UTC
Looks like this has been reported upstream and affects multiple distros:

Same symptoms, possible tie in to the reported kopete issue.  Some folks don't
have the issue, but majority seem to have it.  Wonder if there is a hardware
dependency - I'm running AMD64 and having the issue.

Comment 9 Kevin Kofler 2008-03-13 10:10:02 UTC
Maybe an OpenSSL bug? I remember XChat being hit by similar "SSL negotiation 
fixed" errors and an OpenSSL patch fixed it, maybe the fix was not complete?

Comment 10 Kevin Kofler 2008-03-13 10:10:24 UTC
Oops, I mean "SSL negotiation failed" errors of course, not "fixed". ;-)

Comment 11 Gerald Cox 2008-03-27 03:14:41 UTC
Did a clean install of F9 Beta hoping that maybe something had gotten corrupted
during the install of the Alpha and a fresh install with beta would resolve. 
Same result:

An error occured while loading...
Could not connect to host www.google.com SSL negotiation failed 

Has anyone else done a fresh install from the beta DVD and gotten this to work?

Comment 12 Ngo Than 2008-03-31 10:16:44 UTC
i cannot reproduce with latest rawhide. it seems fixed in rawhide.

Comment 13 Orion Poplawski 2008-03-31 18:14:49 UTC
Still just hangs forever(?) for me on today's rawhide.

Comment 14 Orion Poplawski 2008-03-31 18:20:16 UTC
Here's some actual information from .xsession-errors:

konqueror(3809) LocalDomainUriFilter::filterUri:
konqueror(3809) FixHostUriFilter::filterUri: FixHostUriFilter::filterUri: 
konqueror(3809) KonqMainWindow::openFilteredUrl: url 
"https://bugzilla.redhat.com/"  filt
ered into  KUrl("https://bugzilla.redhat.com/")
konqueror(3809) KonqMainWindow::openUrl: KonqMainWindow::openUrl : url = '
ugzilla.redhat.com/") '   mimeType=' ""  req=
"[typedUrl=https://bugzilla.redhat.com/ newT
abInFront]" ' view= QObject(0x0)
konqueror(3809) KonqMainWindow::openUrl: trying openView for 
t.com/")  (mimeType  "" )
konqueror(3809) KonqMainWindow::openUrl: Creating new konqrun for 
redhat.com/")  req.typedUrl= "https://bugzilla.redhat.com/"
konqueror(3809)/kparts KParts::BrowserRun::scanFile: BrowserRun::scanfile
konqueror(3809)/kio (Slave) KIO::Slave::createSlave: createSlave ' "https" ' for
konqueror(3809)/kio (KIOConnection) KIO::ConnectionServer::listenForRemote:
Listening on
klauncher(3600)/kio (KLauncher) KLauncher::requestSlave: KLauncher: launching
new slave  "
kio_http"  with protocol= "https"  args= ("https",
00.slave-socket", "local:/tmp/ksocket-orion/konquerorwy3809.slave-socket")
kdeinit4: Got EXEC_NEW 'kio_http' from launcher.
kdeinit4: preparing to launch
klauncher(3600)/kio (KLauncher) KLauncher::processRequestReturn: "kio_http" (pid
4315) up
and running.
QSslSocket: cannot find ssl library: QLibrary::load_sys: Cannot load ssl
(libssl.so: cannot open shared object file: No such file or directory).
kio_http(4315)/kio (kioslave) KIO::SlaveBase::checkCachedAuthentication:
SlaveBase::checkCachedAuthInfo window =  52428801  url = 
kded(3602)/kio (KPasswdServer) KPasswdServer::checkAuthInfo:
KPasswdServer::checkAuthInfo: User=  "" , WindowId =  52428801
kio_http(4315) HTTPProtocol::httpOpen: ============ Sending Header:
kio_http(4315) HTTPProtocol::httpOpen: "GET / HTTP/1.1"
kio_http(4315) HTTPProtocol::httpOpen: "Connection: Keep-Alive"
kio_http(4315) HTTPProtocol::httpOpen: "User-Agent: Mozilla/5.0 (compatible;
Konqueror/4.0; Linux) KHTML/4.0.3 (like Gecko) Fedora/4.0.3-1.fc9"
kio_http(4315) HTTPProtocol::httpOpen: "Accept: text/html, image/jpeg,
image/png, text/*, image/*, */*"
kio_http(4315) HTTPProtocol::httpOpen: "Accept-Encoding: x-gzip, x-deflate,
gzip, deflate"
kio_http(4315) HTTPProtocol::httpOpen: "Accept-Charset: utf-8, utf-8;q=0.5, *;q=0.5"
kio_http(4315) HTTPProtocol::httpOpen: "Accept-Language: en-US, en"
kio_http(4315) HTTPProtocol::httpOpen: "Host: bugzilla.redhat.com"
kio_http(4315)/kssl KIO::TCPSlaveBase::disconnectFromHost:
kio_http(4315)/kssl KIO::TCPSlaveBase::connectToHost: before connectToHost:
Socket error is  0 , Socket state is  0
kio_http(4315)/kssl KIO::TCPSlaveBase::connectToHost: after connectToHost:
Socket error is  0 , Socket state is  1
kio_http(4315)/kssl KIO::TCPSlaveBase::connectToHost: after waitForConnected:
Socket error is  0 , Socket state is  3 , waitForConnected returned  true
QSslSocket: cannot call unresolved function SSLv3_client_method
QSslSocket: cannot call unresolved function SSL_CTX_new
QSslSocket: cannot call unresolved function ERR_get_error
QSslSocket: cannot call unresolved function ERR_error_string
knotify(3634) KNotify::event: 29  ref= 0

Looks like it's failing to find the ssl library.

Comment 15 Rex Dieter 2008-03-31 18:54:57 UTC
Let's keep further comment/dialog upstream @

Comment 16 Gerald Cox 2008-04-01 19:10:05 UTC
Created attachment 299948 [details]
strace of konqueror to mail.google.com 

Attaching results of:
strace konqueror 2
target url:  mail.google.com
Received following error messsage:
An error occurred while loading http://mail.google.com:
Could not connect to host www.google.com: SSL negotiation failed.

Comment 17 Gerald Cox 2008-04-01 19:31:07 UTC
Created attachment 299951 [details]
strace of konqueror to mail.google.com 

Correct log file...ignore previous.

Comment 18 Kevin Kofler 2008-04-01 19:40:18 UTC
Thanks for the log, unfortunately that doesn't enlighten us either. :-(

The KDE architecture is biting us there, all the SSL calls happen in the 
kio_http ioslave, so all Konqueror gets is the error message. :-( Back to the 
drawing board...

Comment 19 Orion Poplawski 2008-04-01 20:33:26 UTC
Discussion is moving forward in the upstream bug.  Look there...

Comment 20 Kevin Kofler 2008-04-02 02:33:29 UTC
From the upstream bugzilla:

------- Additional Comment #31 From Orion Poplawski 2008-04-01 22:32 -------  
I think it's a Qt issue.   
     QLibrary libssl(QLatin1String("ssl")); 
     if (!libssl.load()) { 
         // Cannot find libssl 
         qWarning("QSslSocket: cannot find ssl library: %s.", 
         return false; 
 Seems like this needs to be libssl(QLatin1String("ssl"),SSL_VERSION) with 
SSL_VERSION = 7 in Fedora devel. 
 So it's asking QLibrary to load "libssl.so".

Comment 21 Kevin Kofler 2008-04-02 02:33:48 UTC
Thanks Orion, this looks fairly easy to patch.

Comment 22 Kevin Kofler 2008-04-02 03:44:59 UTC
Should be fixed in qt-4.3.4-10.fc9, please test.

This is also likely to fix the SSL-related errors with Kopete.

Comment 23 Ngo Than 2008-04-02 09:43:02 UTC
it's similar bug in kdelibs that we already fixed. Good work Orion, thanks.

Comment 24 Kevin Kofler 2008-04-02 13:49:48 UTC
Confirmed fixed, thanks to Gerald Cox.

Comment 25 Kevin Kofler 2008-04-02 13:56:05 UTC
*** Bug 436974 has been marked as a duplicate of this bug. ***

Note You need to log in before you can comment on or make changes to this bug.