We're Hiring!

sslv3 alert handshake failure when user attempts to log in

Having a problem deploying OMERO? Please ask new questions at https://forum.image.sc/tags/omero
Please note:
Historical discussions about OMERO. Please look for and ask new questions at https://forum.image.sc/tags/omero

The OMERO.server installation documentation begins here and you can find OMERO.web deployment documentation here.

sslv3 alert handshake failure when user attempts to log in

Postby jacques2020 » Tue Jun 06, 2017 6:49 am

Dear omero team,

I updated to omero 5.3.2 and to do so upgrade my debian server to stretch anticipating a bit the stable release. This was the only way to get ice3.6.
Any attempt to log in omero fails. On the CLI running on the server, I obtain the following message

Code: Select all
root@cedre-5a:/usr/local/OMERO# sudo -u cedre-agent OMERO.server-Current/bin/omero search "Image" "zyg-9"
Previously logged in to localhost:4064 as root
Server: [localhost:4064]
Username: [root]jacques
Password:
InternalException: Failed to connect: exception ::Ice::ProtocolException
{
    reason = SSL error occurred for new outgoing connection:
remote address = 127.0.0.1:4064
sslv3 alert handshake failure
}


Below is the diagnostics for your information about versions.
There is no erroneous entry in master.err, master.out or Blitz-0.log at the time of the issue.

Googleing a bit my issue, I found that IceSSL and java 8 may not interact correctly and tried to change params after the recommendation I found
sudo -u cedre-agent OMERO.server-Current/bin/omero config set IceSSL.Ciphers "NONE (DH_anon.*AES)”
sudo -u cedre-agent OMERO.server-Current/bin/omero config set IceSSL.VerifyPeer 0
But it did not help. I have no knowledge about Ice and its implementation in omero. So it was maybe a naive approach.

I also tried the patch (find in the omero forum)
http://blog.openmicroscopy.org/tech-iss ... ava-issue/
but it no longer apply
Code: Select all
patching file etc/grid/templates.xml
Hunk #1 FAILED at 469.
1 out of 1 hunk FAILED -- saving rejects to file etc/grid/templates.xml.rej


At other times and repeated several times (see below), I found (I don’t know if it is related). For the sake of completeness, there is also an issue at omero stop reproduced below (129.20.159.125 is the IP of the server, named cedre-5a).

Thank you very much for your help.

Best

Jacques


Diagnostics

================================================================================
OMERO Diagnostics 5.3.2-ice36-b62
================================================================================

Commands: java -version 1.8.0 (/usr/bin/java)
Commands: python -V 2.7.13 (/usr/bin/python)
Commands: icegridnode --version 3.6.3 (/usr/bin/icegridnode)
Commands: icegridadmin --version 3.6.3 (/usr/bin/icegridadmin)
Commands: psql --version 9.6.3 (/usr/bin/psql)

Server: icegridnode running
Server: Blitz-0 active (pid = 11737, enabled)
Server: DropBox active (pid = 11770, enabled)
Server: FileServer active (pid = 11772, enabled)
Server: Indexer-0 active (pid = 11775, enabled)
Server: MonitorServer active (pid = 11776, enabled)
Server: OMERO.Glacier2 active (pid = 11778, enabled)
Server: OMERO.IceStorm active (pid = 11781, enabled)
Server: PixelData-0 active (pid = 11782, enabled)
Server: Processor-0 active (pid = 11798, enabled)
Server: Tables-0 active (pid = 11796, enabled)
Server: TestDropBox inactive (enabled)

Log dir: /usr2/local/OMERO/OMERO.server-Current/var/log exists
Log files: Blitz-0.log 8.0 MB errors=301 warnings=31
Log files: DropBox.log 41.0 KB errors=6 warnings=17
Log files: FileServer.log 5.0 KB
Log files: Indexer-0.log 3.0 MB errors=613 warnings=224
Log files: MonitorServer.log 20.0 KB
Log files: OMEROweb.lock 0.0 KB
Log files: OMEROweb.log 0.0 KB
Log files: PixelData-0.log 1.0 MB errors=304 warnings=109
Log files: Processor-0.log 354.0 KB errors=12 warnings=298
Log files: Tables-0.log 72.0 KB errors=12 warnings=25
Log files: TestDropBox.log n/a
Log files: master.err 36.0 KB errors=23 warnings=20
Log files: master.out 0.0 KB
Log files: Total size 14.27 MB


Environment:OMERO_HOME=(unset)
Environment:OMERO_NODE=(unset)
Environment:OMERO_MASTER=(unset)
Environment:OMERO_USERDIR=(unset)
Environment:OMERO_TMPDIR=(unset)
Environment:PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
Environment:PYTHONPATH=(unset)
Environment:ICE_HOME=(unset)
Environment:LD_LIBRARY_PATH=(unset)
Environment:DYLD_LIBRARY_PATH=(unset)

OMERO SSL port:4064
OMERO TCP port:4063
OMERO data dir:'/OMERO' Exists? True Is writable? True
OMERO temp dir:'/home/cedre-agent/omero/tmp' Exists? True Is writable? True (Size: 4622106653)

JVM settings: Blitz-${index} -Xmx19200m -XX:MaxPermSize=1g -XX:+IgnoreUnrecognizedVMOptions
JVM settings: Indexer-${index} -Xmx4800m -XX:MaxPermSize=1g -XX:+IgnoreUnrecognizedVMOptions
JVM settings: PixelData-${index} -Xmx7200m -XX:MaxPermSize=1g -XX:+IgnoreUnrecognizedVMOptions
JVM settings: Repository-${index} -Xmx4800m -XX:MaxPermSize=1g -XX:+IgnoreUnrecognizedVMOptions

OMERO.web status... [NOT STARTED]
Django version: 1.8.18


Errors found several times in Blitz-0.log

2017-06-05 07:28:33,081 INFO [ ome.services.util.ServiceHandler] (l.Server-1) Executor.doWork -- ome.services.sessions.SessionManagerImpl.update[]
2017-06-05 07:28:33,081 INFO [ ome.services.util.ServiceHandler] (l.Server-1) Args: [null, InternalSF@1397795607]
2017-06-05 07:28:33,092 INFO [ ome.security.basic.EventHandler] (l.Server-1) Auth: user=0,group=0,event=193541526(Sessions),sess=0551402d-286b-456e-a143-fa9e8f2febbc
2017-06-05 07:28:33,097 INFO [ ome.security.basic.CurrentDetails] (l.Server-1) Adding log:UPDATE,class ome.model.meta.Session,345620
2017-06-05 07:28:33,121 INFO [ org.perf4j.TimingLogger] (l.Server-1) start[1496640513081] time[39] tag[omero.call.success.ome.services.sessions.SessionManagerImpl$4.doWork]
2017-06-05 07:28:33,121 INFO [ ome.services.util.ServiceHandler] (l.Server-1) Rslt: ome.model.meta.Session:Id_345620
2017-06-05 07:28:33,135 ERROR [ ome.services.blitz.util.ParamsCache] (2-thread-5) Failed to load params for 1254620
omero.InternalException: null
at sun.reflect.GeneratedConstructorAccessor179.newInstance(Unknown Source) ~[na:na]
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[na:1.8.0_131]
at java.lang.reflect.Constructor.newInstance(Constructor.java:423) ~[na:1.8.0_131]
at java.lang.Class.newInstance(Class.java:442) ~[na:1.8.0_131]
at IceInternal.BasicStream.createUserException(BasicStream.java:2779) ~[ice.jar:na]
at IceInternal.BasicStream.access$300(BasicStream.java:14) ~[ice.jar:na]
at IceInternal.BasicStream$EncapsDecoder11.throwException(BasicStream.java:3614) ~[ice.jar:na]
at IceInternal.BasicStream.throwException(BasicStream.java:2291) ~[ice.jar:na]
at IceInternal.OutgoingAsync.throwUserException(OutgoingAsync.java:399) ~[ice.jar:na]
at omero.grid.InteractiveProcessorPrxHelper.end_params(InteractiveProcessorPrxHelper.java:874) ~[blitz.jar:na]
at omero.grid.InteractiveProcessorPrxHelper.params(InteractiveProcessorPrxHelper.java:761) ~[blitz.jar:na]
at omero.grid.InteractiveProcessorPrxHelper.params(InteractiveProcessorPrxHelper.java:754) ~[blitz.jar:na]
at omero.grid.ParamsHelper.generateScriptParams(ParamsHelper.java:153) ~[blitz.jar:na]
at ome.services.blitz.util.ParamsCache$Loader.createParams(ParamsCache.java:304) ~[blitz.jar:na]
at ome.services.blitz.util.ParamsCache._load(ParamsCache.java:217) [blitz.jar:na]
at ome.services.blitz.util.ParamsCache.lookupAll(ParamsCache.java:181) [blitz.jar:na]
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[na:1.8.0_131]
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[na:1.8.0_131]
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[na:1.8.0_131]
at java.lang.reflect.Method.invoke(Method.java:498) ~[na:1.8.0_131]
at org.springframework.util.MethodInvoker.invoke(MethodInvoker.java:273) [spring-core.jar:3.0.1.RELEASE]
at org.springframework.scheduling.quartz.MethodInvokingJobDetailFactoryBean$MethodInvokingJob.executeInternal(MethodInvokingJobDetailFactoryBean.java:264) [spring-context-support.jar:3.0.1.RELEASE]
at org.springframework.scheduling.quartz.QuartzJobBean.execute(QuartzJobBean.java:86) [spring-context-support.jar:3.0.1.RELEASE]
at org.quartz.core.JobRunShell.run(JobRunShell.java:203) [quartz.jar:1.5.2]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [na:1.8.0_131]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [na:1.8.0_131]
at java.lang.Thread.run(Thread.java:748) [na:1.8.0_131]
2017-06-05 07:28:33,135 INFO [ ome.services.blitz.util.ParamsCache] (2-thread-5) New size of scripts cache: 0 (5160 ms.)
2017-06-05 07:28:33,135 INFO [ org.perf4j.TimingLogger] (2-thread-5) start[1496640507975] time[5160] tag[omero.scripts.cache.all]
2017-06-05 07:28:33,135 INFO [o.services.sessions.SessionContext$Count] (2-thread-5) -Reference count: 3da73cc1-20e6-48b5-bedf-64bf674ec495=0
2017-06-05 07:28:33,135 INFO [ omero.cmd.SessionI] (2-thread-5) doDestroy(ServiceFactoryI(session-dc7c6d34-6e30-46a8-88bf-88f66065b632/3da73cc1-20e6-48b5-bedf-64bf674ec495))


Error at stopping omero

! 6/5/17 07:22:56:531 warning: Blitz-0-Ice.ThreadPool.Server-457: dispatch exception:
identity: session-85f0946d-d622-4287-8bab-e0f53f2fba85/f42b9e96-4f7f-4ca8-ae6d-4253381e422e
facet:
operation: destroy
remote host: 129.20.159.125 remote port: 49532
Ice.ObjectAdapterDeactivatedException
name = "BlitzAdapter"
at Ice.ObjectAdapterI.checkForDeactivation(ObjectAdapterI.java:1170)
at Ice.ObjectAdapterI.findFacet(ObjectAdapterI.java:498)
at Ice.ObjectAdapterI.find(ObjectAdapterI.java:491)
at omero.cmd.SessionI.unregisterServant(SessionI.java:633)
at omero.cmd.SessionI.cleanServants(SessionI.java:449)
at omero.cmd.SessionI.cleanServants(SessionI.java:379)
at omero.cmd.SessionI.doDestroy(SessionI.java:369)
at omero.cmd.SessionI.destroy(SessionI.java:297)
at omero.api._ServiceFactoryTie.destroy(_ServiceFactoryTie.java:65)
at Glacier2._SessionDisp.___destroy(_SessionDisp.java:94)
at omero.api._ServiceFactoryDisp.__dispatch(_ServiceFactoryDisp.java:1263)
at IceInternal.Incoming.invoke(Incoming.java:221)
at Ice.ConnectionI.invokeAll(ConnectionI.java:2536)
at Ice.ConnectionI.dispatch(ConnectionI.java:1145)
at Ice.ConnectionI.message(ConnectionI.java:1056)
at IceInternal.ThreadPool.run(ThreadPool.java:395)
at IceInternal.ThreadPool.access$300(ThreadPool.java:12)
at IceInternal.ThreadPool$EventHandlerThread.run(ThreadPool.java:832)
at java.lang.Thread.run(Thread.java:745)

!! 06/05/17 07:22:56.621 error: communicator not destroyed during global destruction.
jacques2020
 
Posts: 102
Joined: Fri Jul 15, 2011 7:46 am

Re: sslv3 alert handshake failure when user attempts to log

Postby jacques2020 » Wed Jun 07, 2017 2:18 pm

Hi,

I tried to get more information about the issue. I use the matlab client, passed the -Djavax.net.debug=ssl flag to matlab java and got the following result when I try to connect to omero. I am embarrassed to interpret that. I someone has a suggestion !
Thank you very much

Best

Jacques

-----------------------------------------------------------------

Using SSLEngineImpl.
Ignoring unavailable cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
Ignoring unavailable cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA
Ignoring unavailable cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA
Ignoring unavailable cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
Ignoring unavailable cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
Ignoring unavailable cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
Ignoring unavailable cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384
Ignoring unavailable cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA256
Ignoring unavailable cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
Ignoring unavailable cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
Ignoring unavailable cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA
Ignoring unavailable cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
Ignoring unavailable cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA
Ignoring unavailable cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA
Ignoring unavailable cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
Ignoring unavailable cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA
Ignoring unavailable cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA
Ignoring unavailable cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
Ignoring unavailable cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
Ignoring unavailable cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
Ignoring unavailable cipher suite: TLS_ECDH_anon_WITH_AES_256_CBC_SHA
Ignoring unavailable cipher suite: TLS_DH_anon_WITH_AES_256_CBC_SHA
Ignoring unavailable cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384
Ignoring unavailable cipher suite: TLS_DH_anon_WITH_AES_256_CBC_SHA256
Ignoring unavailable cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA256
Ignoring unavailable cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
Ignoring unavailable cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
Ignoring unavailable cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA
Ignoring unavailable cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
Ignoring unavailable cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA
Ignoring unavailable cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA
Allow unsafe renegotiation: false
Allow legacy hello messages: true
Is initial handshake: true
Is secure renegotiation: false
Ignoring unsupported cipher suite: TLS_DH_anon_WITH_AES_128_CBC_SHA256
%% No cached client session
*** ClientHello, TLSv1
RandomCookie: GMT: 1496843488 bytes = { 222, 250, 162, 186, 14, 49, 12, 128, 203, 27, 71, 125, 172, 59, 232, 36, 3, 22, 66, 218, 243, 105, 57, 188, 226, 172, 195, 151 }
Session ID: {}
Cipher Suites: [TLS_DH_anon_WITH_AES_128_CBC_SHA, TLS_ECDH_anon_WITH_AES_128_CBC_SHA]
Compression Methods: { 0 }
Extension elliptic_curves, curve names: {secp256r1, sect163k1, sect163r2, secp192r1, secp224r1, sect233k1, sect233r1, sect283k1, sect283r1, secp384r1, sect409k1, sect409r1, secp521r1, sect571k1, sect571r1, secp160k1, secp160r1, secp160r2, sect163r1, secp192k1, sect193r1, sect193r2, secp224k1, sect239k1, secp256k1}
Extension ec_point_formats, formats: [uncompressed]
Extension renegotiation_info, renegotiated_connection: <empty>
***
Ice.HostResolver, WRITE: TLSv1 Handshake, length = 116
Ice.ThreadPool.Client-0, READ: TLSv1 Alert, length = 2
Ice.ThreadPool.Client-0, RECV TLSv1 ALERT: fatal, handshake_failure
Ice.ThreadPool.Client-0, fatal: engine already closed. Rethrowing javax.net.ssl.SSLException: Received fatal alert: handshake_failure
Ice.ThreadPool.Client-0, fatal: engine already closed. Rethrowing javax.net.ssl.SSLException: Received fatal alert: handshake_failure
Ice.ThreadPool.Client-0, called closeOutbound()
Ice.ThreadPool.Client-0, closeOutboundInternal()
Ice.ThreadPool.Client-0, SEND TLSv1 ALERT: warning, description = close_notify
Ice.ThreadPool.Client-0, WRITE: TLSv1 Alert, length = 2
Ice.ThreadPool.Client-0, called closeInbound()
Ice.ThreadPool.Client-0, fatal: engine already closed. Rethrowing javax.net.ssl.SSLException: Inbound closed before receiving peer's close_notify: possible truncation attack?
jacques2020
 
Posts: 102
Joined: Fri Jul 15, 2011 7:46 am

Re: sslv3 alert handshake failure when user attempts to log

Postby jburel » Wed Jun 07, 2017 3:51 pm

Dear Jacques

I have started a debian 8.8 docker and installed omero 5.3.2 with ice 3.6 and java 8
I can import images without any problem from both the Desktop client and CLI

Code: Select all
================================================================================
OMERO Diagnostics 5.3.2-ice36-b62
================================================================================
       
Commands:   java -version                  1.8.0     (/usr/bin/java)
Commands:   python -V                      2.7.9     (/usr/bin/python)
Commands:   icegridnode --version          3.6.3     (/opt/Ice-3.6.3/bin/icegridnode)
Commands:   icegridadmin --version         3.6.3     (/opt/Ice-3.6.3/bin/icegridadmin)
Commands:   psql --version                 9.4.12    (/usr/bin/psql)

Server:     icegridnode                    running
Server:     Blitz-0                        active (pid = 619, enabled)
Server:     DropBox                        active (pid = 644, enabled)
Server:     FileServer                     active (pid = 635, enabled)
Server:     Indexer-0                      active (pid = 742, enabled)
Server:     MonitorServer                  active (pid = 647, enabled)
Server:     OMERO.Glacier2                 active (pid = 650, enabled)
Server:     OMERO.IceStorm                 active (pid = 677, enabled)
Server:     PixelData-0                    active (pid = 654, enabled)
Server:     Processor-0                    active (pid = 739, enabled)
Server:     Tables-0                       active (pid = 712, enabled)
Server:     TestDropBox                    inactive (enabled)

Log dir:    /home/omero/OMERO.server/var/log exists
Log files:  Blitz-0.log                    937.0 KB      errors=0    warnings=1   
Log files:  DropBox.log                    1.0 KB       
Log files:  FileServer.log                 0.0 KB       
Log files:  Indexer-0.log                  2.0 KB        errors=0    warnings=1   
Log files:  MonitorServer.log              1.0 KB       
Log files:  OMEROweb.lock                  0.0 KB       
Log files:  OMEROweb.log                   0.0 KB        errors=0    warnings=1   
Log files:  PixelData-0.log                2.0 KB       
Log files:  Processor-0.log                59.0 KB     
Log files:  Tables-0.log                   0.0 KB       
Log files:  TestDropBox.log                n/a
Log files:  master.err                     0.0 KB       
Log files:  master.out                     0.0 KB       
Log files:  Total size                     1.01 MB


Environment:OMERO_HOME=(unset)             
Environment:OMERO_NODE=(unset)             
Environment:OMERO_MASTER=(unset)           
Environment:OMERO_USERDIR=(unset)         
Environment:OMERO_TMPDIR=(unset)           
Environment:PATH=/opt/Ice-3.6.3/bin:/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games
Environment:PYTHONPATH=(unset)             
Environment:ICE_HOME=/opt/Ice-3.6.3       
Environment:LD_LIBRARY_PATH=(unset)       
Environment:DYLD_LIBRARY_PATH=(unset)     

OMERO SSL port:4064                           
OMERO TCP port:4063                           
OMERO data dir:'/OMERO'                       Exists? True   Is writable? True
OMERO temp dir:'/home/omero/omero/tmp'        Exists? True   Is writable? True   (Size: 0)



I am using openjdk version "1.8.0_131".

This is going to be tricky to resolve without access to the server since I cannot reproduce the issue.

Cheers
Jmarie
User avatar
jburel
Team Member
 
Posts: 348
Joined: Thu May 21, 2009 6:38 pm
Location: dundee

Re: sslv3 alert handshake failure when user attempts to log

Postby jacques2020 » Wed Jun 07, 2017 4:25 pm

Dear Jean-Marie,

Thank you for your answer. I can give you access through teamviewer on a "gateway" machine, in turn logged in the server with a shell e.g. The server is behind the university firewall.

You have the very same version than me except for the kernel and maybe Ice. I see the yours is in opt. How did you manage to install ice3.6 on debian 8.x ? The official repo of debian is not providing it and at zeroc website, I found most of the packages but not icegrid... (it is available for Ubuntu but it fail to install on debian 8.x). I tried also the compilation but there was a issue with the version of glibc (or glibc++). Maybe your ice version contain a fix ? (pure speculation).

When connecting, do I use openSSL or so ?

In the meantimes, I will try to create a fresh omero to see whether the issue is in the config/database or on the software installed.

Is there anything else I can decently try ?

Thank you so much for your help
Best

JAcques
jacques2020
 
Posts: 102
Joined: Fri Jul 15, 2011 7:46 am

Re: sslv3 alert handshake failure when user attempts to log

Postby jacques2020 » Wed Jun 07, 2017 4:37 pm

To complete my answer:
I created a new DB user, a new DB, move away the xml in etc/grid and followed the install process to create a fresh omero. When I try to connect, the issue is the same.
So, it appears to be related to the frameworks installed. I can maybe first try to install the same ice as you, and if not enough downgrade the kernel to debian 8.8

Thank you in all cases for your help.

Jacques

PS: If the debugging appears too complex, let me know. I can also bring everything back to 5.2.7 and wait for a few month it meant to be solved (I have backups). The only issue that pushed me to upgrade is that cleanse is not working on 5.2.7 so we accumulate data without being able to clean the up.
jacques2020
 
Posts: 102
Joined: Fri Jul 15, 2011 7:46 am

Re: sslv3 alert handshake failure when user attempts to log

Postby jburel » Wed Jun 07, 2017 7:49 pm

Hi Jacques

Ice will use OpenSSL on Linux.
To install ice 3.6.3 on Debian, you can follow the steps described in the following file
https://github.com/ome/omero-install/bl ... ce_deps.sh
Maybe re-installing Ice will solve the issue
The version of OpenSSL I have installed is
Code: Select all
OpenSSL 1.0.1t  3 May 2016


Cheers
jmarie
User avatar
jburel
Team Member
 
Posts: 348
Joined: Thu May 21, 2009 6:38 pm
Location: dundee

Re: sslv3 alert handshake failure when user attempts to log

Postby jacques2020 » Thu Jun 08, 2017 8:44 am

Hello,

so I remove all ice / zeroc stuff and installed the one after your advices. But it did not help.

Then I downgraded openSSL and libSSL using debian snapshot to the same as yours.
Code: Select all
OpenSSL 1.0.1t  3 May 2016

But the issue remain exactly the same.

What remains as possibilities to my mind are:
A. let you manipulate the server remotely using team viewer if you think you could manage and if you are interested (is it a troubleshooting that can be beneficial to other users ?)

B. Revert to debian 8.8 from backups (and destroy this install) and wait for a fix.

Let me know what would be best to your mind.

Thank you very much for your help
Best
Jacques
jacques2020
 
Posts: 102
Joined: Fri Jul 15, 2011 7:46 am

Re: sslv3 alert handshake failure when user attempts to log

Postby jburel » Thu Jun 08, 2017 9:18 am

Hi Jacques

Sorry if I missed the first point, which version of Debian are you using?
I could try that version first on my side

Cheers
Jmarie
User avatar
jburel
Team Member
 
Posts: 348
Joined: Thu May 21, 2009 6:38 pm
Location: dundee

Re: sslv3 alert handshake failure when user attempts to log

Postby jacques2020 » Thu Jun 08, 2017 9:26 am

No problem. I use Debian 9, stretch in late testing since it was the only way I knew to get ice36.
Best
Jacques
jacques2020
 
Posts: 102
Joined: Fri Jul 15, 2011 7:46 am

Re: sslv3 alert handshake failure when user attempts to log

Postby jburel » Thu Jun 08, 2017 9:39 am

Thanks, I will try it and see I can reproduce the problem
If you downgrade to 8.8, it should work (I hope)

Cheers
jmarie
User avatar
jburel
Team Member
 
Posts: 348
Joined: Thu May 21, 2009 6:38 pm
Location: dundee

Next

Return to Installation and Deployment

Who is online

Users browsing this forum: No registered users and 1 guest