Reply
Contributor
Posts: 12
Registered: ‎06-03-2014

Re: SSL Timeout Connecting to Sandbox

[ Edited ]

The issue is still occurring for me.

Member
Posts: 7
Registered: ‎06-04-2014

Re: SSL Timeout Connecting to Sandbox

If I use the old Curl request 

 

curl_setopt($request, CURLOPT_SSL_VERIFYPEER, FALSE);

 

I still have the same exact problem (hangs for awhile then returns empty response code).

 

If I use the revised code curl_setopt($request, CURLOPT_SSLVERSION, 3);

 

(forcing version 3) it works. So basically the same as before the rollback and after the changes related to the new ciphers.

Member
Posts: 7
Registered: ‎06-04-2014

Re: SSL Timeout Connecting to Sandbox

Opps didn't reset connection so probabaly didn't get the new changes. Will update shortly.

Member
Posts: 7
Registered: ‎06-04-2014

Re: SSL Timeout Connecting to Sandbox

Still not working unless code forces Curl to use SSL3.

Member
Posts: 5
Registered: ‎06-03-2014

Re: SSL Timeout Connecting to Sandbox

I found a solution for rails. I installed openssl 1.0.1g through homebrew (make sure "openssl version" in the command line corrosponds correctly), and reinstalled ruby. The reinstillation step caught me off guard since I thought openssl was dynamically linked. 

Posts: 321
Topics: 5
Kudos: 37
Blog Posts: 5
Ideas: 0
Solutions: 26
Registered: ‎11-09-2011

Re: SSL Timeout Connecting to Sandbox

For clarity's sake, what changed is where SSL termination occured. The new location in our network where we moved SSL termination had the new ciphers. We've moved back to the old location, so you should be getting the exact same setup that you were prior to us moving SSL termination.

If you made any changes to your code or configuration before, please revert back to your previous setup, establish a new connection, and try again.

--
"Move fast and break things," out. "Move carefully and fix what you break," in.
Highlighted
Posts: 321
Topics: 5
Kudos: 37
Blog Posts: 5
Ideas: 0
Solutions: 26
Registered: ‎11-09-2011

Re: SSL Timeout Connecting to Sandbox

Update: We're investigating further as we're seeing the same SSL results as before rollback. I apologize for the inconvenience here.

--
"Move fast and break things," out. "Move carefully and fix what you break," in.
Posts: 321
Topics: 5
Kudos: 37
Blog Posts: 5
Ideas: 0
Solutions: 26
Registered: ‎11-09-2011

Re: SSL Timeout Connecting to Sandbox

We've reapplied the change in SSL termination and have confirmed it is now pointing back to where it originally did, with its SSL configuration and ciphers as you are used to. Please reconnect and try again. Thanks.

--
"Move fast and break things," out. "Move carefully and fix what you break," in.
Contributor
Posts: 12
Registered: ‎06-03-2014

Re: SSL Timeout Connecting to Sandbox

It's working for me now.

Member
Posts: 7
Registered: ‎06-03-2014

Re: SSL Timeout Connecting to Sandbox

I tested this, and it is working on stable Debian 7 released openssl.

 

For the future, what are the plans for this upgrade? Why did this cause so many issues, and what is going to change to prevent it from happening when the upgrade moves to production?