On Fri, Mar 24, 2017 at 4:11 PM, Ben Coman <btc@openinworld.com> wrote:
>
>
>
> On Fri, Mar 24, 2017 at 3:48 PM, Ben Coman <btc@openinworld.com> wrote:
>>
>>
>>
>> On Fri, Mar 24, 2017 at 3:02 PM, Stephane Ducasse <stepharo.self@gmail.com> wrote:
>>>
>>> Hi guys
>>>
>>> in the mooc (first example) we have the following expression
>>>
>>> (ZnEasy getPng: 'http://pharo.org/web/files/pharo.png')
>>>
>>> and it does not work anymore. I'm pair programming with Amal in Rennes
>>> from the university in italy and from her univ in Rennes
>>> we both get on 60 and 50
>>>
>>> and time out https
>>>
>>> sslException: text code: code
>>> self error:
>>> (String streamContents: [ :stream |
>>> stream << 'SSL Exception: ' << text << ' [code:'.
>>> stream print: code.
>>> stream << ']' ])
>>>
>>> Any idea.
>>>
>>> Tx in advance
>>
>>
>> What platform are you on.
>>
>> On Windows 7, Pharo 60447, Win32 VM built on Mar ��9 2017 16:38:45 CUT Compiler: 4.9.2 VMMaker versionString VM: 201703091627
>> I can confirm the same error with this...
>> (ZnEasy getPng: 'http://pharo.org/web/files/pharo.png').
>> ��
>> but picking some random SSL PNG, this works fine...
>> (ZnEasy getPng: 'https://blog.keycdn.com/blog/wp-content/uploads/2015/10/http1-vs-http2.png').
>>
>> It is strange that you are getting an SSL error using http rather than https.
>> It seems the server is redirecting to http to https and maybe this is not handled?
>> https://geekflare.com/http-to-https-redirection/
>>
>
> Nope. Thats not it. Same problem with...
> �� ��ZnEasy getPng: 'https://pharo.org:443/web/files/pharo.png'
>
> Now if I put this hack in ZdcSecureSocketStream>>connect....
> �� [ �� ��(result := self sslSession connect: in from: 1 to: count into: out).
> ��Transcript crShow: result.
> �� �� �� �� ��result = 0 ] whileFalse: [ ....
>
> ZnEasy getPng: 'https://blog.keycdn.com/blog/wp-content/uploads/2015/10/http1-vs-http2.png'.
> ==>
> 99
> 134
> 0
>
> while...
> ZnEasy getPng: 'https://pharo.org:443/web/files/pharo.png'
> ==>
> 99
> -5
>
> If I try the same in Pharo5.0-ReleaseWin32, build 50761, VM built on May ��4 2016 12:17:02 Compiler: 4.6.2
> VMMaker versionString https://github.com/pharo-project/pharo-vm.git Commit: b8ec25a570d7539653e1d793e97609adb509aaed Date: 2016-05-04 11:14:22 +0200 By: Esteban Lorenzano <estebanlm@gmail.com> Jenkins build #589
>
> ZnEasy getPng: 'https://pharo.org:443/web/files/pharo.png'
> ==>
> 292
> -1


In Chrome, after opening each of the following and going... More Tools > Developer Tools > Security
I see a difference...

* https://pharo.org:443/web/files/pharo.png
�� The connection to this site is encrypted and authenticated using a strong protocol (TLS 1.2),
�� a strong key exchange (ECDHE_ECDSA with P-256), and a strong cipher (AES_128_GCM).

* https://blog.keycdn.com/blog/wp-content/uploads/2015/10/http1-vs-http2.png
�� The connection to this site is encrypted and authenticated using a strong protocol (TLS 1.2),
�� a strong key exchange (ECDHE_RSA with P-256), and a strong cipher (AES_256_GCM).


I haven't parsed this properly, but maybe related
https://github.com/openssl/openssl/issues/2658


This server itself seems okay...
https://www.thesslstore.com/ssltools/ssl-checker.php?hostname=pharo.org#results