search

ilarik / kanki-irodsclient

Cross-Platform iRODS GUI Client
BSD 3-Clause "New" or "Revised" License
20 stars 9 forks source link

iinit renders error #5

Open toverman opened 8 years ago

toverman commented 8 years ago

Hello, I installed iRODS 1.0.7 on my mac running OSX 10.11.3. Initially, the iinit command did not work, so I had to install it following the instructions under "Getting Started" at https://github.com/ilarik/kanki-irodsclient. This allowed the iinit command to work and it prompted the necessary information. However, when I input the info, I receive the following:

Enter your current PAM password:ERROR: sslStart: error in SSL_connect. SSL error: error:140740BF:SSL routines:SSL23_CLIENT_HELLO:no protocols available [-] libpam.cpp:231:pam_auth_client_request : status [SSL_HANDSHAKE_ERROR] errno [] -- message [failed to enable ssl]

failed with error -2103000 SSL_HANDSHAKE_ERROR

Thanks for your help, Trey

ilarik commented 8 years ago

Hello,

Thanks for your report. I haven't actually tested the 1.0.7 release of the irodsclient on OS X 10.11 at all, so it's good to know that it doesn't work (on OS X 10.10 it should). I haven't yet had time to release the 1.1.0 release, which is compatible with OS X 10.11 and would be qualified as "tested" without the beta flag.

You could try the beta release 1.1.0b1 in the mean time, which is fact is has proven to be at least as stable as the 1.0.7 release and has the experimental search functionality (which has been reported to be working).

I am very soon able to get back to the development of kanki-irodsclient and will release 1.1.0 in the course of this spring. I still encourage you to try out the beta release, since it should work pretty decently unless you want to compile the application from source on OS X 10.11 (can be done with the instructions in the blog post at http://irods.org/2015/10/native-gui-access-to-irods-on-a-mac-or-linux-desktop/).

Please let me know if the 1.1.0b1 release works for you.

Best regards, Ilari

toverman commented 8 years ago

Thanks llari, I will download it and report back.

Trey

On Thu, Feb 25, 2016 at 3:41 PM, Ilari Korhonen notifications@github.com wrote:

Hello,

Thanks for your report. I haven't actually tested the 1.0.7 release of the irodsclient on OS X 10.11 at all, so it's good to know that it doesn't work (on OS X 10.10 it should). I haven't yet had time to release the 1.1.0 release, which is compatible with OS X 10.11 and would be qualified as "tested" without the beta flag.

You could try the beta release 1.1.0b1 in the mean time, which is fact is has proven to be at least as stable as the 1.0.7 release and has the experimental search functionality (which has been reported to be working).

I am very soon able to get back to the development of kanki-irodsclient and will release 1.1.0 in the course of this spring. I still encourage you to try out the beta release, since it should work pretty decently unless you want to compile the application from source on OS X 10.11 (can be done with the instructions in the blog post).

Please let me know if the 1.1.0b1 release works for you.

Best regards, Ilari

— Reply to this email directly or view it on GitHub https://github.com/ilarik/kanki-irodsclient/issues/5#issuecomment-188974360 .

Trey Overman Program Manager, Data Science Initiative Project Manager, Laboratory of Analytic Sciences North Carolina State University 919-513-6741

toverman commented 8 years ago

One other fact that may be relevant. I had a colleague here at NC State who has run into the same issue, however he's running OS 10.10.5.

On Thu, Feb 25, 2016 at 3:41 PM, Ilari Korhonen notifications@github.com wrote:

Hello,

Thanks for your report. I haven't actually tested the 1.0.7 release of the irodsclient on OS X 10.11 at all, so it's good to know that it doesn't work (on OS X 10.10 it should). I haven't yet had time to release the 1.1.0 release, which is compatible with OS X 10.11 and would be qualified as "tested" without the beta flag.

You could try the beta release 1.1.0b1 in the mean time, which is fact is has proven to be at least as stable as the 1.0.7 release and has the experimental search functionality (which has been reported to be working).

I am very soon able to get back to the development of kanki-irodsclient and will release 1.1.0 in the course of this spring. I still encourage you to try out the beta release, since it should work pretty decently unless you want to compile the application from source on OS X 10.11 (can be done with the instructions in the blog post).

Please let me know if the 1.1.0b1 release works for you.

Best regards, Ilari

— Reply to this email directly or view it on GitHub https://github.com/ilarik/kanki-irodsclient/issues/5#issuecomment-188974360 .

Trey Overman Program Manager, Data Science Initiative Project Manager, Laboratory of Analytic Sciences North Carolina State University 919-513-6741

ilarik commented 8 years ago

Ok, now that's interesting. Good to know!

It might be that the 1.1.0b1 might fix his issues as well, since it builds against the newer openssl-1.1.0 libraries from the homebrew distribution and packages all of them inside the /Applications/iRODS.app bundle.

There were some curious incompatiblities when using the older OS X provided SSL library. The SSL handshake wouldn't work out-of-the-box against iRODS servers running with openssl-1.0.0 SSL/TLS.

The iRODS consortium provided irods-icommands in the release 4.1.8 will compile on OS X 10.8 - 10.11 out-of-the-box when building against the homebrew packages. My distribution of kanki-irodsclient as of version 1.1.0b1 should do the same without installing the dependencies, last time I checked at least.

Best regards, Ilari

toverman commented 8 years ago

We tried 1.1.0b1 here and it rendered pretty much the same error:

ERROR: sslStart: error in SSL_connect. SSL error: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed [-] libpam.cpp:231:pam_auth_client_request : status [SSL_HANDSHAKE_ERROR] errno [] -- message [failed to enable ssl]

failed with error -2103000 SSL_HANDSHAKE_ERROR

On Thu, Feb 25, 2016 at 3:55 PM, Ilari Korhonen notifications@github.com wrote:

Ok, now that's interesting. Good to know!

It might be that the 1.1.0b1 might fix his issues as well, since it builds against the newer openssl-1.1.0 libraries from the homebrew distribution and packages all of them inside the /Applications/iRODS.app bundle.

There was some curious incompatiblities when using the older OS X provided SSL library. The SSL handshake wouldn't work out-of-the-box against iRODS servers running with openssl-1.1.0 SSL.

The iRODS consortium provided irods-icommands in the release 4.1.8 will compile on OS X 10.8 - 10.11 out-of-the-box when building against the homebrew packages. My distribution of kanki-irodsclient as of version 1.1.0b1 should do the same without installing the dependencies, last time I checked at least.

Best regards, Ilari

— Reply to this email directly or view it on GitHub https://github.com/ilarik/kanki-irodsclient/issues/5#issuecomment-188982051 .

Trey Overman Program Manager, Data Science Initiative Project Manager, Laboratory of Analytic Sciences North Carolina State University 919-513-6741

ilarik commented 8 years ago

This is curious. I'm currently using the same build here with SSL support fully functional.

Are you sure that in the certificate chain there isn't any signers that would require an additional CA certificate to be added to the system? This can be done also only for iRODS configuring the shell with the environment variable irodsSSLCACertificateFile pointing to the path of a file hosting the CA certificate.

I have still to implement this in the GUI via a configurable parameter. When using certificates signed by the system-supported CA vendors, no problems should not arise, at least not with my users here.