Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 899200 (JBEWS-216)

Summary: EWS - ssl on solaris10 sparc broken
Product: [JBoss] JBoss Enterprise Web Server 1 Reporter: Aleksandar Kostadinov <akostadinov>
Component: unspecifiedAssignee: Permaine Cheung <pcheung>
Status: CLOSED NEXTRELEASE QA Contact:
Severity: urgent Docs Contact:
Priority: urgent    
Version: EWS 1.0.1   
Target Milestone: ---   
Target Release: EWS 1.0.1   
Hardware: Unspecified   
OS: Unspecified   
URL: http://jira.jboss.org/jira/browse/JBEWS-216
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
solaris10 sparc64
Last Closed: 2010-02-16 15:58:00 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
step1.jpg
none
step2.jpg
none
step3.jpg none

Description Aleksandar Kostadinov 2010-02-05 16:56:53 UTC
Date of First Response: 2010-02-08 09:16:43
project_key: JBEWS

I see following in the browser:
Secure Connection Failed
An error occurred during a connection to dev92:8443.
SSL peer reports incorrect Message Authentication Code.
(Error code: ssl_error_bad_mac_alert)

We've seen something similar with 1.0.0 and it was fixed for that arch not sure how it was.

Comment 1 Permaine Cheung 2010-02-08 14:16:43 UTC
Mladen, please take a look. Thanks!

Comment 2 Mladen Turk 2010-02-08 15:39:49 UTC
If it's not observed on other platforms (Solaris especially)
I presume it's a missing Solaris update of some kind.

There are also some reports that this doesn't happen if using IE7, so it might be
that IE7 doesn't treat this as an error


Comment 3 Aleksandar Kostadinov 2010-02-08 19:38:24 UTC
Tried the same from dev92 and from a rhel machine:
wget https://dev92/
--14:15:15--  https://dev92/
           => `index.html'
Resolving dev92... 10.16.88.161
Connecting to dev92|10.16.88.161|:443... connected.
OpenSSL: error:140943FC:SSL routines:SSL3_READ_BYTES:sslv3 alert bad record mac
Unable to establish SSL connection.

Also it is the same with EWS installed on a sol9-2.

Odd is that the wget executable on the sol9-2 machine (actually a solaris 10 machine), is not throwing errors connecting to dev92. Wget on sol9-2 is older though 1.9. openssl version is 0.9.7 on both.

But definitely it seems like a problem on the server.

Comment 4 Aleksandar Kostadinov 2010-02-08 19:41:58 UTC
JBPAPP-1786 and JBPAPP-1657 - seems like we had the same with solaris10 x86 so I wonder what can we do if we are already using sun studio 12? Are we?

Comment 5 Aleksandar Kostadinov 2010-02-08 19:41:58 UTC
Link: Added: This issue depends JBPAPP-1786


Comment 6 Aleksandar Kostadinov 2010-02-08 19:41:58 UTC
Link: Added: This issue depends JBPAPP-1657


Comment 7 Aleksandar Kostadinov 2010-02-08 19:42:16 UTC
Link: Added: This issue related JBPAPP-1786


Comment 8 Aleksandar Kostadinov 2010-02-08 19:42:17 UTC
Link: Added: This issue related JBPAPP-1657


Comment 9 Aleksandar Kostadinov 2010-02-08 19:42:35 UTC
Link: Removed: This issue depends JBPAPP-1786 


Comment 10 Aleksandar Kostadinov 2010-02-08 19:42:42 UTC
Link: Removed: This issue depends JBPAPP-1657 


Comment 11 Mladen Turk 2010-02-11 15:38:33 UTC
Certainly not an EWS issue.

Comment 13 Mladen Turk 2010-02-11 20:15:27 UTC
I really do not understand your question. You said It works witth older wget, and doesn't with FireFox, so what do you expect me to do?



Comment 15 Mladen Turk 2010-02-11 20:37:37 UTC
Let's do some recap then:
1. which build number you are using for testing.
2. Please specify which boxes is this on (I have access to dev12 only.

dev12 has SunStudo12, not sure if dev92 has, and some builds were done on that box AFAICT


Comment 16 Mladen Turk 2010-02-11 21:08:57 UTC
Attachment: Added: step1.jpg


Comment 17 Mladen Turk 2010-02-11 21:09:13 UTC
Attachment: Added: step2.jpg


Comment 18 Mladen Turk 2010-02-11 21:09:26 UTC
Attachment: Added: step3.jpg


Comment 19 Mladen Turk 2010-02-11 21:13:01 UTC
So logged to dev92
$> cd /opt
$> sudo wget http://hudson.qa.jboss.com/hudson/job/RHATews-1-solaris10-sparc/181/artifact/rhews/hudson/artifacts/bin/RHATews-1.0.1_0-solaris10-sparc64.zip
$> sudo unzip -q RHATews-1.0.1_0-solaris10-sparc64.zip
$> cd redhat/ews/etc
$> sudo ./.postinstall
$> sudo vi httpd/conf/httpd.com
      changed Listen 80 to Listen 8880
$> sudo vi httpd/conf.d/ssl.conf
     changed Listen and VirtualHost to 8843 from 443
$> cd ../sbin
$> sudo ./apachectl start

voila!

Please close this case once and for all
Thanks


Comment 20 Aleksandar Kostadinov 2010-02-12 05:55:36 UTC
Thanks,

I can confirm that with this build ssl is working very well. Has the build environment been updated between the old and current build or you implemented some fix?

Anyways, this can now really get closed.

Comment 21 Mladen Turk 2010-02-12 06:19:44 UTC
Build you were using for testing probably came from dsp-sol10-2-sparc box.
This box AFAICT doesn't have the needed build tools, so it only gave the
partial build. In next version I'll make sure the build doesn't finish
if one of the components fails. 


Comment 22 Aleksandar Kostadinov 2010-02-16 15:58:00 UTC
verified in CR2