Package: libsoup2.4-1 Version: 2.38.1-3 When I use any web browser (that uses libsoup) to access the URL <https://be.my.ucla.edu/> I get the following error:
Unable to load page Problem occurred while loading the URL https://be.my.ucla.edu/ SSL handshake failed Affected web browsers include midori, dwb, uzbl, surf, and luakit. Browsers that work for me are firefox and rekonq, both of which don't use libsoup. I haven't tried Chromium. The openssl command line program successfully connects to the server: $ printf "GET / HTTP/1.1\n\n" | \ openssl s_client -ign_eof -connect be.my.ucla.edu:443 [...] HTTP/1.1 302 Please Wait [...] See full output in the attachment "openssl.txt"
CONNECTED(00000003) --- Certificate chain 0 s:/C=US/postalCode=90095/ST=CA/L=Los Angeles/street=405 Hilgard Avenue/O=University of California, Los Angeles/OU=Undergraduate Education Information Technology, UIT/CN=be.my.ucla.edu i:/C=US/O=Internet2/OU=InCommon/CN=InCommon Server CA 1 s:/C=US/O=Internet2/OU=InCommon/CN=InCommon Server CA i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root 2 s:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root --- Server certificate -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIRAMZccyoofPg0Ge24agVHWnUwDQYJKoZIhvcNAQEFBQAw UTELMAkGA1UEBhMCVVMxEjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5D b21tb24xGzAZBgNVBAMTEkluQ29tbW9uIFNlcnZlciBDQTAeFw0xMjAzMDgwMDAw MDBaFw0xNTAzMDgyMzU5NTlaMIHkMQswCQYDVQQGEwJVUzEOMAwGA1UEERMFOTAw OTUxCzAJBgNVBAgTAkNBMRQwEgYDVQQHEwtMb3MgQW5nZWxlczEbMBkGA1UECRMS NDA1IEhpbGdhcmQgQXZlbnVlMS4wLAYDVQQKEyVVbml2ZXJzaXR5IG9mIENhbGlm b3JuaWEsIExvcyBBbmdlbGVzMTwwOgYDVQQLEzNVbmRlcmdyYWR1YXRlIEVkdWNh dGlvbiBJbmZvcm1hdGlvbiBUZWNobm9sb2d5LCBVSVQxFzAVBgNVBAMTDmJlLm15 LnVjbGEuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9suf6VFK oqWt7nAJCJtkYFSfqv13eep4BZxVGX7HIqud5yodXss2Lo3PkXMzDJozN4sxBd1u PXpGTaNCk/xle1uCuZNeKZOp1ZwdDiuhSTUnkFB6w5u7Mf6zaizOza+Q5S/wbmTU fFabp/YDceUZoi5ImjIgEHbfyv7qOBGKJnYFAz1BaEs/uH4JT1kDhZHvG9wDThMu c7gkZF7/1SFZUV29qXwcULr2sXEOpenjEzSRc6uplDm0gWcSrrTZV8RRC2ed8+jN c3CjQu1ozGFK3h4i8G6PMyPbB5+EDy8Vc7SbDxadk+Tit7qftJod1QP1YnDIgGzk RmXThteAtKQo2QIDAQABo4IBqzCCAacwHwYDVR0jBBgwFoAUSE9a+i9Kml7gUPNr e1Wl3vW+NF0wHQYDVR0OBBYEFMSbz4K45DXa3SJCywrlv63WgSahMA4GA1UdDwEB /wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjBdBgNVHSAEVjBUMFIGDCsGAQQBriMBBAMBATBCMEAGCCsGAQUFBwIBFjRo dHRwczovL3d3dy5pbmNvbW1vbi5vcmcvY2VydC9yZXBvc2l0b3J5L2Nwc19zc2wu cGRmMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9jcmwuaW5jb21tb24ub3JnL0lu Q29tbW9uU2VydmVyQ0EuY3JsMG8GCCsGAQUFBwEBBGMwYTA5BggrBgEFBQcwAoYt aHR0cDovL2NlcnQuaW5jb21tb24ub3JnL0luQ29tbW9uU2VydmVyQ0EuY3J0MCQG CCsGAQUFBzABhhhodHRwOi8vb2NzcC5pbmNvbW1vbi5vcmcwGQYDVR0RBBIwEIIO YmUubXkudWNsYS5lZHUwDQYJKoZIhvcNAQEFBQADggEBAHsn4AslzCxs1OZdu7l6 BwVcoQ8E8Ri6NPc8BKHW8S5Hk7rbNJcCBAgc8Ecotq3wLaknqDokrRfsKmIwzjrR q3oSNG2OglPgfPuDLXk8rhptf6fME9aTiREpDhlCyDkASXY7wAGFqUOtkMI99v+B PFAjuKAKBO7zWbAc1TnmDE2JinSqLRPiAjqULX5vVLchDFpwbZ3Fo9BlapgajQCA iXYU/g8PpvPWjlq6f1276BrYTQfadearGvuE+TyttFC2XINaIBlvZ8SF6XFAbG+7 rspcDXrnnuWhfHNlc3sDBd1z/f6JvhjM0685E+84PokYPPtbDuEtnvER/+V9mDrw FMs= -----END CERTIFICATE----- subject=/C=US/postalCode=90095/ST=CA/L=Los Angeles/street=405 Hilgard Avenue/O=University of California, Los Angeles/OU=Undergraduate Education Information Technology, UIT/CN=be.my.ucla.edu issuer=/C=US/O=Internet2/OU=InCommon/CN=InCommon Server CA --- No client certificate CA names sent --- SSL handshake has read 3906 bytes and written 666 bytes --- New, TLSv1/SSLv3, Cipher is AES256-SHA256 Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE SSL-Session: Protocol : TLSv1.2 Cipher : AES256-SHA256 Session-ID: F9A2223CD08DAEA2257F52517CABA8891E687C9ED86643014F595A64E9CBAB42 Session-ID-ctx: Master-Key: DDF8E71C54C64248403C6E1CA08104955A0EE9C9896E2815EB5682410D15066CA825021499DC8A501DC05C3B4731C207 Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None Start Time: 1414366683 Timeout : 300 (sec) Verify return code: 19 (self signed certificate in certificate chain) --- HTTP/1.1 302 Please Wait Cache-Control: private,no-store,no-cache,max-age=0 Content-Length: 40 Content-Type: text/html Expires: Wed, 01 Jan 1997 12:00:00 GMT Location: https://shb.ais.ucla.edu/shibboleth-idp/profile/Shibboleth/SSO?shire=https%3A%2F%2Fbe.my.ucla.edu%2FShibboleth.sso%2FSAML%2FPOST&time=1414366683&target=cookie%3A1414366683_c570&providerId=https%3A%2F%2Fbe.my.ucla.edu%2Fshibboleth-sp%2F Server: Microsoft-IIS/7.0 Set-Cookie: _shibstate_1414366683_c570=https%3A%2F%2Fbe.my.ucla.edu%2F; path=/; HttpOnly Set-Cookie: _shibstate_1414366683_c570=https%3A%2F%2Fbe.my.ucla.edu%2F; path=/; HttpOnly; path=/ X-Powered-By: ASP.NET Date: Sun, 26 Oct 2014 23:38:03 GMT <HTML><BODY>Redirecting...</BODY></HTML>