search

bleakgrey / tootle

GTK-based Mastodon client for Linux
GNU General Public License v3.0
401 stars 61 forks source link

"SSL handshake failed" reported with any instance #121

Closed Lyude closed 4 years ago

Lyude commented 5 years ago

Hi! wanted to give this client a try on my Fedora 29 machine by installing it through Flatpak, however whenever I try to connect to any instance I just get the same message:

screenshot from 2018-12-29 12-21-25

I've tried both mastodon.social and queer.party so far and neither seem to work, I've also tried both the foo and https://foo variants in the instance textbox.

Output of flatpak info com.github.bleakgrey.tootle:

Ref: app/com.github.bleakgrey.tootle/x86_64/stable
ID: com.github.bleakgrey.tootle
Arch: x86_64
Branch: stable
Origin: flathub
Collection ID: org.flathub.Stable
Date: 2018-11-02 21:09:35 +0000
Subject: Update to version 0.2.0 (5f6d80bf)
Commit: f5eb5e51f442d29edbd504f381630221da424149962430f536ea03ae6466b8ae
Parent: 5248c66cfa59fa50e01f3b16ad0c3f5838358ad923ab7d3f1bf8183c610d5ba1
Location: /var/lib/flatpak/app/com.github.bleakgrey.tootle/x86_64/stable/f5eb5e51f442d29edbd504f381630221da424149962430f536ea03ae6466b8ae
Installed size: 81.3 MB
Runtime: org.freedesktop.Platform/x86_64/18.08
Sdk: org.freedesktop.Sdk/x86_64/18.08

Unfortunately tootle doesn't seem to give any kind of useful debugging information:

➜  ~ flatpak run com.github.bleakgrey.tootle

(com.github.bleakgrey.tootle:2): Gdk-WARNING **: 12:30:51.302: Failed to read portal settings: GDBus.Error:org.freedesktop.DBus.Error.UnknownMethod: No such interface “org.freedesktop.portal.Settings” on object at path /org/freedesktop/portal/desktop
[INFO 12:30:51.352852] Application.vala:155: Tootle version: 0.2.0
[INFO 12:30:51.352882] Application.vala:157: Kernel version: 4.19.10-300.fc29.x86_64

Let me know if there's any other information I could get you to help debug this further

bttmchnd commented 5 years ago

Same on Arch and https://ministry.moonbutt.science.

hdonnay commented 5 years ago

I'm also seeing something similar:

 % flatpak info com.github.bleakgrey.tootle
Ref: app/com.github.bleakgrey.tootle/x86_64/stable
ID: com.github.bleakgrey.tootle
Arch: x86_64
Branch: stable
Origin: flathub
Collection ID: org.flathub.Stable
Date: 2018-11-02 21:09:35 +0000
Subject: Update to version 0.2.0 (5f6d80bf)
Commit: f5eb5e51f442d29edbd504f381630221da424149962430f536ea03ae6466b8ae
Parent: 5248c66cfa59fa50e01f3b16ad0c3f5838358ad923ab7d3f1bf8183c610d5ba1
Location: /home/hank/.local/share/flatpak/app/com.github.bleakgrey.tootle/x86_64/stable/f5eb5e51f442d29edbd504f381630221da424149962430f536ea03ae6466b8ae
Installed size: 81.3 MB
Runtime: org.freedesktop.Platform/x86_64/18.08
Sdk: org.freedesktop.Sdk/x86_64/18.08
% flatpak run com.github.bleakgrey.tootle                                
Gtk-Message: 12:36:09.436: Failed to load module "pk-gtk-module"
Gtk-Message: 12:36:09.436: Failed to load module "canberra-gtk-module"
Gtk-Message: 12:36:09.436: Failed to load module "pk-gtk-module"
Gtk-Message: 12:36:09.436: Failed to load module "canberra-gtk-module"
[INFO 12:36:09.436581] Application.vala:155: Tootle version: 0.2.0
[INFO 12:36:09.436606] Application.vala:157: Kernel version: 4.19.9-300.fc29.x86_64
[INFO 12:36:09.449006] Notificator.vala:40: Starting: /api/v1/streaming/?stream=user
[INFO 12:36:09.471738] Notificator.vala:40: Starting: /api/v1/streaming/?stream=user
[INFO 12:36:09.475587] Notificator.vala:40: Starting: /api/v1/streaming/?stream=public:local
[INFO 12:36:09.477022] Notificator.vala:40: Starting: /api/v1/streaming/?stream=public

(com.github.bleakgrey.tootle:2): Gtk-WARNING **: 12:36:09.539: gtk_window_set_titlebar() called on a realized window
[WARNING 12:36:09.602522] Notificator.vala:48: The server did not accept the WebSocket handshake.
[WARNING 12:36:09.602569] Notificator.vala:71: Aborted: /api/v1/streaming/?stream=user. Reconnecting in 2 seconds.
[WARNING 12:36:09.609572] Notificator.vala:48: The server did not accept the WebSocket handshake.
[WARNING 12:36:09.609655] Notificator.vala:71: Aborted: /api/v1/streaming/?stream=user. Reconnecting in 2 seconds.
[WARNING 12:36:09.609847] Notificator.vala:48: The server did not accept the WebSocket handshake.
[WARNING 12:36:09.609877] Notificator.vala:71: Aborted: /api/v1/streaming/?stream=public:local. Reconnecting in 2 seconds.
[WARNING 12:36:09.610240] Notificator.vala:48: The server did not accept the WebSocket handshake.
[WARNING 12:36:09.610276] Notificator.vala:71: Aborted: /api/v1/streaming/?stream=public. Reconnecting in 2 seconds.
[WARNING 12:36:09.622861] Network.vala:57: TLS error: G_TLS_CERTIFICATE_UNKNOWN_CA

The error pop-up has that TLS error text.

The actual cert for the instance I'm using (mastodon.technology) seems fine:

% openssl s_client -showcerts -connect mastodon.technology:443 </dev/null
CONNECTED(00000004)
depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify return:1
depth=0 CN = mastodon.technology
verify return:1
---
Certificate chain
 0 s:CN = mastodon.technology
   i:C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
   i:O = Digital Signature Trust Co., CN = DST Root CA X3
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIQCgFBQgAAAVOFc2oLheynCDANBgkqhkiG9w0BAQsFADA/
MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMT
DkRTVCBSb290IENBIFgzMB4XDTE2MDMxNzE2NDA0NloXDTIxMDMxNzE2NDA0Nlow
SjELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUxldCdzIEVuY3J5cHQxIzAhBgNVBAMT
GkxldCdzIEVuY3J5cHQgQXV0aG9yaXR5IFgzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnNMM8FrlLke3cl03g7NoYzDq1zUmGSXhvb418XCSL7e4S0EF
q6meNQhY7LEqxGiHC6PjdeTm86dicbp5gWAf15Gan/PQeGdxyGkOlZHP/uaZ6WA8
SMx+yk13EiSdRxta67nsHjcAHJyse6cF6s5K671B5TaYucv9bTyWaN8jKkKQDIZ0
Z8h/pZq4UmEUEz9l6YKHy9v6Dlb2honzhT+Xhq+w3Brvaw2VFn3EK6BlspkENnWA
a6xK8xuQSXgvopZPKiAlKQTGdMDQMc2PMTiVFrqoM7hD8bEfwzB/onkxEz0tNvjj
/PIzark5McWvxI0NHWQWM6r6hCm21AvA2H3DkwIDAQABo4IBfTCCAXkwEgYDVR0T
AQH/BAgwBgEB/wIBADAOBgNVHQ8BAf8EBAMCAYYwfwYIKwYBBQUHAQEEczBxMDIG
CCsGAQUFBzABhiZodHRwOi8vaXNyZy50cnVzdGlkLm9jc3AuaWRlbnRydXN0LmNv
bTA7BggrBgEFBQcwAoYvaHR0cDovL2FwcHMuaWRlbnRydXN0LmNvbS9yb290cy9k
c3Ryb290Y2F4My5wN2MwHwYDVR0jBBgwFoAUxKexpHsscfrb4UuQdf/EFWCFiRAw
VAYDVR0gBE0wSzAIBgZngQwBAgEwPwYLKwYBBAGC3xMBAQEwMDAuBggrBgEFBQcC
ARYiaHR0cDovL2Nwcy5yb290LXgxLmxldHNlbmNyeXB0Lm9yZzA8BgNVHR8ENTAz
MDGgL6AthitodHRwOi8vY3JsLmlkZW50cnVzdC5jb20vRFNUUk9PVENBWDNDUkwu
Y3JsMB0GA1UdDgQWBBSoSmpjBH3duubRObemRWXv86jsoTANBgkqhkiG9w0BAQsF
AAOCAQEA3TPXEfNjWDjdGBX7CVW+dla5cEilaUcne8IkCJLxWh9KEik3JHRRHGJo
uM2VcGfl96S8TihRzZvoroed6ti6WqEBmtzw3Wodatg+VyOeph4EYpr/1wXKtx8/
wApIvJSwtmVi4MFU5aMqrSDE6ea73Mj2tcMyo5jMd6jmeWUHK8so/joWUoHOUgwu
X4Po1QYz+3dszkDqMp4fklxBwXRsW10KXzPMTZ+sOPAveyxindmjkW8lGy+QsRlG
PfZ+G6Z6h7mjem0Y+iWlkYcV4PIWL1iwBi8saCbGS5jN2p8M+X+Q7UNKEkROb3N6
KOqkqm57TH2H3eDJAkSnh6/DNFu0Qg==
-----END CERTIFICATE-----
---
Server certificate
subject=CN = mastodon.technology

issuer=C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3

---
No client certificate CA names sent
Peer signing digest: SHA512
Peer signature type: RSA
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 3241 bytes and written 457 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: AA0D9EE94EAC57E2D5B4FD273092EA90975A84DA04D659BB95230DB664A0308C
    Session-ID-ctx: 
    Master-Key: 9749EEC94D41D8BCDD5691403FFEF5E34CB6AF25FC343EA2F89DCF3E140AB493355F89EB6E1B7BAEE038BF3E7F4FC429
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - 3a 2e 33 3f 20 c3 d3 35-67 b0 60 f3 cf cb 0b bb   :.3? ..5g.`.....
    0010 - 0f 76 ae 5e 69 b4 9c 93-86 42 d7 f1 4c 40 82 16   .v.^i....B..L@..
    0020 - 97 bd ec 11 18 51 6e 75-a4 4a 7b 32 22 99 2b 2a   .....Qnu.J{2".+*
    0030 - d2 8a b8 3c 74 de 3e 75-67 bd 9d 45 a9 be 73 eb   ...<t.>ug..E..s.
    0040 - 68 02 3c 30 c0 67 aa a7-4d a0 aa 25 9e 09 aa 97   h.<0.g..M..%....
    0050 - 05 33 aa 95 90 04 8f 18-94 76 93 e8 4c d2 b3 59   .3.......v..L..Y
    0060 - 6e 77 31 a6 13 d6 28 78-8b 5d 19 87 65 af 6c dc   nw1...(x.]..e.l.
    0070 - 4a da bd 71 83 e6 15 6c-50 f0 36 23 e6 85 c2 8e   J..q...lP.6#....
    0080 - ae 87 fd 76 bf 9d 4d 7a-c4 b1 e4 33 29 9e b9 ea   ...v..Mz...3)...
    0090 - 91 49 95 f5 47 b6 1c fc-9f da 8e be 75 c7 d3 8d   .I..G.......u...
    00a0 - c6 e9 90 b6 8c 7c 51 87-e7 e6 ec f9 c3 c8 85 38   .....|Q........8
    00b0 - bc ba f3 a7 20 23 45 f6-89 a0 61 21 d7 66 64 ab   .... #E...a!.fd.

    Start Time: 1546536730
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
---
DONE

There doesn't seem to have been an update in the flatpak since early November, but perhaps the sdk has had an update recently.

aadilayub commented 5 years ago

I'm experiencing this issue as well on Fedora 29

Ceralor commented 5 years ago

Experiencing identical issue on Fedora 29.

cagatay-y commented 5 years ago

I was having this issue myself for some time. Today, after deleting and setting my account from the app again it worked. It may also work for you too. BTW, it will be great if you post the result when you try this.