[Libreoffice-bugs] [Bug 127649] Manual Check For Latest Version Fails through proxy

Wed Jan 22 19:42:48 UTC 2020

https://bugs.documentfoundation.org/show_bug.cgi?id=127649

--- Comment #5 from spam at dexlab.nl ---
(In reply to Guilhem Moulin from comment #4)
> Is the proxy trying to MiTM the connection?

No.

> Does it support TLSv1.2 or
> later?  Does it support SNI?

Yes.

> Could you trace a connection to https://update.libreoffice.org through the
> proxy (using curl or similar not LO's update check), so we see at which
> point the handshake chokes?

bofh at ubuntu:~$ curl https://update.libreoffice.org -x proxy.lan:3128 -v
* Rebuilt URL to: https://update.libreoffice.org/
*   Trying 192.168.1.253...
* Connected to proxy.lan (192.168.1.253) port 3128 (#0)
* Establish HTTP proxy tunnel to update.libreoffice.org:443
> CONNECT update.libreoffice.org:443 HTTP/1.1
> Host: update.libreoffice.org:443
> User-Agent: curl/7.47.0
> Proxy-Connection: Keep-Alive
>
< HTTP/1.1 200 Connection established
<
* Proxy replied OK to CONNECT request
* found 148 certificates in /etc/ssl/certs/ca-certificates.crt
* found 592 certificates in /etc/ssl/certs
* ALPN, offering http/1.1
* SSL connection using TLS1.2 / ECDHE_RSA_AES_128_GCM_SHA256
*        server certificate verification OK
*        server certificate status verification SKIPPED
*        common name: update.libreoffice.org (matched)
*        server certificate expiration date OK
*        server certificate activation date OK
*        certificate public key: RSA
*        certificate version: #3
*        subject: CN=update.libreoffice.org
*        start date: Thu, 12 Dec 2019 01:07:34 GMT
*        expire date: Wed, 11 Mar 2020 01:07:34 GMT
*        issuer: C=US,O=Let's Encrypt,CN=Let's Encrypt Authority X3
*        compression: NULL
* ALPN, server accepted to use http/1.1
> GET / HTTP/1.1
> Host: update.libreoffice.org
> User-Agent: curl/7.47.0
> Accept: */*
>
< HTTP/1.1 302 Moved Temporarily
< Server: nginx/1.14.2
< Date: Wed, 22 Jan 2020 19:38:47 GMT
< Content-Type: text/html
< Content-Length: 161
< Connection: keep-alive
< Location: https://www.libreoffice.org/download
<
<html>
<head><title>302 Found</title></head>
<body bgcolor="white">
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.14.2</center>
</body>
</html>
* Connection #0 to host proxy.lan left intact
bofh at ubuntu:~$

Nothing wrong or strange concering the proxy / connection. Simple vanilla
Squid.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20200122/699f05ba/attachment.htm>