Package: libsoup2.4-1
Version: 2.38.1-3

When I use any web browser (that uses libsoup) to access the URL
<https://be.my.ucla.edu/> I get the following error:

  Unable to load page
  Problem occurred while loading the URL https://be.my.ucla.edu/
  SSL handshake failed

Affected web browsers include midori, dwb, uzbl, surf, and luakit.
Browsers that work for me are firefox and rekonq, both of which don't
use libsoup.  I haven't tried Chromium.

The openssl command line program successfully connects to the server:

  $ printf "GET / HTTP/1.1\n\n" | \
    openssl s_client -ign_eof -connect be.my.ucla.edu:443
  [...]
  HTTP/1.1 302 Please Wait
  [...]

See full output in the attachment "openssl.txt"
CONNECTED(00000003)
---
Certificate chain
 0 s:/C=US/postalCode=90095/ST=CA/L=Los Angeles/street=405 Hilgard 
Avenue/O=University of California, Los Angeles/OU=Undergraduate Education 
Information Technology, UIT/CN=be.my.ucla.edu
   i:/C=US/O=Internet2/OU=InCommon/CN=InCommon Server CA
 1 s:/C=US/O=Internet2/OU=InCommon/CN=InCommon Server CA
   i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External 
CA Root
 2 s:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External 
CA Root
   i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External 
CA Root
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=US/postalCode=90095/ST=CA/L=Los Angeles/street=405 Hilgard 
Avenue/O=University of California, Los Angeles/OU=Undergraduate Education 
Information Technology, UIT/CN=be.my.ucla.edu
issuer=/C=US/O=Internet2/OU=InCommon/CN=InCommon Server CA
---
No client certificate CA names sent
---
SSL handshake has read 3906 bytes and written 666 bytes
---
New, TLSv1/SSLv3, Cipher is AES256-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : AES256-SHA256
    Session-ID: F9A2223CD08DAEA2257F52517CABA8891E687C9ED86643014F595A64E9CBAB42
    Session-ID-ctx: 
    Master-Key: 
DDF8E71C54C64248403C6E1CA08104955A0EE9C9896E2815EB5682410D15066CA825021499DC8A501DC05C3B4731C207
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1414366683
    Timeout   : 300 (sec)
    Verify return code: 19 (self signed certificate in certificate chain)
---
HTTP/1.1 302 Please Wait
Cache-Control: private,no-store,no-cache,max-age=0
Content-Length: 40
Content-Type: text/html
Expires: Wed, 01 Jan 1997 12:00:00 GMT
Location: 
https://shb.ais.ucla.edu/shibboleth-idp/profile/Shibboleth/SSO?shire=https%3A%2F%2Fbe.my.ucla.edu%2FShibboleth.sso%2FSAML%2FPOST&time=1414366683&target=cookie%3A1414366683_c570&providerId=https%3A%2F%2Fbe.my.ucla.edu%2Fshibboleth-sp%2F
Server: Microsoft-IIS/7.0
Set-Cookie: _shibstate_1414366683_c570=https%3A%2F%2Fbe.my.ucla.edu%2F; path=/; 
HttpOnly
Set-Cookie: _shibstate_1414366683_c570=https%3A%2F%2Fbe.my.ucla.edu%2F; path=/; 
HttpOnly; path=/
X-Powered-By: ASP.NET
Date: Sun, 26 Oct 2014 23:38:03 GMT

<HTML><BODY>Redirecting...</BODY></HTML>

Reply via email to