search

moxie0 / Convergence

An agile, distributed, and secure alternative to the Certificate Authority system.
http://convergence.io
623 stars 127 forks source link

Connectivity failure - notaries overloaded? #177

Open HolgerV opened 10 years ago

HolgerV commented 10 years ago

Since I get connectivity failures in the last months for almost every notary in https://github.com/moxie0/Convergence/wiki/Notaries, I gave up using Convergence Addon temporarily. Only two old style notaries seem to respond to my browsers questions. Additionally, adding most of the listed notaries fails with "Unknown notary bundle version". I'm using Convergence 0.09 with FF 17.07 or 17.01.

Is this a usual overload issue or something special with my software?

fkm commented 10 years ago

I too wasn't able to get Convergence to work this time around. First, I thought that the two default Notaries I had were down, but after trying some of the Notaries listed here on GitHub, I'm wondering, whether this is a problem with the Firefox addon. I'm using FIrefox 24 and Convergence 0.09.

caluml commented 10 years ago

Sorry to add a "me too", but I thought I'd try this plugin a week ago, and since I installed it, I haven't had a single successful notary query. Centos 6.4, Firefox 17.0.9, Notaries ThoughtCrime, Qualys and Lost Signal.

Seems like a very sensible replacement to the useless CA hierarchy, but it's never worked for me.

djpavon commented 10 years ago

I too have never successfully gotten Convergence to work, and get connection failures on at least 2/3 of the notaries for every site I visit. My system information is: Debian Testing (up-to-date as of 2013-10-30) Iceweasel 17.0.9 Convergence 0.9 Here is a stdout log of a sample run: I started Iceweasel (and thus opened all previously tabs) with Convergence disabled. Then I enabled Convergence and loaded this page. Finally I clicked on the yellow Authentication error bar, viewed the dialog and closed it. Sorry for the huge post length, I couldn't find a way to attach the log separately.

(process:8018): GLib-CRITICAL **: g_slice_set_config: assertion `sys_page_size == 0' failed
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/util/ConvergenceUtil.js
Loaded!
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/ctypes/NSPR.js
Loaded!
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/ctypes/NSS.js
Loaded!
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/ctypes/SSL.js
Loaded!
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/ctypes/SQLITE.js
Loaded!
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/sockets/ConvergenceListenSocket.js
Loaded!
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/sockets/ConvergenceClientSocket.js
Loaded!
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/sockets/ConvergenceServerSocket.js
Loaded!
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/ctypes/Serialization.js
Loaded!
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/ssl/CertificateManager.js
Loaded!
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/ssl/CertificateInfo.js
Loaded!
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/proxy/HttpProxyServer.js
Loaded!
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/components/LocalProxy.js
Loaded!
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/ssl/PhysicalNotary.js
Loaded!
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/ssl/Notary.js
Loaded!
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/components/SettingsManager.js
Loaded!
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/components/ConnectionManager.js
Loaded!
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/ssl/NativeCertificateCache.js
Loaded!
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/components/DatabaseHelper.js
Loaded!
Loading: /home/jackson/.mozilla/firefox/8wkd229h.default/extensions/convergence@extension.thoughtcrime.org/chrome/content/util/ConvergenceUtil.js
Loaded!
Failed to find nspr4 in installed directory, checking system paths.
Failed to find nss3 in installed directory, checking system paths.
Failed to find ssl3 in installed directory, checking system paths.
Failed to find mozsqlite3 in installed directory, checking system paths for sqlite3.
Failed to find standard sqlite3 permutations, checking debian-specific libsqlite3.so.0.
Deserialized physical notary: notary.thoughtcrime.org : 80
Deserialized physical notary: notary2.thoughtcrime.org : 80
Deserialized physical notary: notary-us.convergence.qualys.com : 80
Deserialized physical notary: notary-eu.convergence.qualys.com : 80
Deserialized physical notary: notary-us-2.convergence.qualys.com : 80
Deserialized physical notary: notary-eu-2.convergence.qualys.com : 80
Deserialized physical notary: notary1.lostsig.net : 80
Deserialized physical notary: notary2.lostsig.net : 88
Configuring cache...
Found existing certificate!
LISTEN PORT: 60901
Unable to initialize workerfactory, assuming Gecko 8.
Initializing shuffleworker...
Posting...
Timer will fire in: 27839999
Convergence Setup Complete.
Initializing ShuffleWorker...
Restored FD: PRFileDesc.ptr(ctypes.UInt64("0x7f790f7e0880"))
Restored Address: PRNetAddr(2, 58861, 16777343, [0, 0, 0, 0, 0, 0, 0, 0])
Handling accept event...
ShuffleWorker accepted connection: 0x7f7909e890d0
Spawning connectionworker...
Posted message to ConnectionWorker!
ConnectionWorker got message...
Failed to find mozsqlite3 in installed directory, checking system paths for sqlite3.
Failed to find standard sqlite3 permutations, checking debian-specific libsqlite3.so.0.
Deserializing across transport: notary.thoughtcrime.org : 80
Deserializing across transport: notary2.thoughtcrime.org : 80
Deserializing across transport: notary-us.convergence.qualys.com : 80
Deserializing across transport: notary-eu.convergence.qualys.com : 80
Deserializing across transport: notary-us-2.convergence.qualys.com : 80
Deserializing across transport: notary-eu-2.convergence.qualys.com : 80
Deserializing across transport: notary1.lostsig.net : 80
Deserializing across transport: notary2.lostsig.net : 88
Reading http headers...
Reading from FD: PRFileDesc.ptr(ctypes.UInt64("0x7f7909e890d0"))
Total headers: CONNECT github.com:443 HTTP/1.1
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130917 Firefox/17.0 Iceweasel/17.0.9
Proxy-Connection: keep-alive
Host: github.com

Read http headers: CONNECT github.com:443 HTTP/1.1
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130917 Firefox/17.0 Iceweasel/17.0.9
Proxy-Connection: keep-alive
Host: github.com

Calculating PKI root...
Certificate signature status: 0
Certificate chain length: 3
Root DER certificate: SECItem(0, ctypes.unsigned_char.ptr(ctypes.UInt64("0x7f78ec4e2020")), 969)
Root certificate: CERTCertificate.ptr(ctypes.UInt64("0x7f7902224020"))
Root name: www.digicert.com
Got slots: PK11SlotList.ptr(ctypes.UInt64("0x7f78e42a70e0"))
SlotNode: PK11SlotListElement.ptr(ctypes.UInt64("0x7f78e42a7140"))
Token: Builtin Object Token
Initializing certificate cache...
Checking validity...
Checking certificate cache: D7:12:E9:69:65:DC:F2:36:C8:74:C7:03:7D:C0:B2:24:A9:3B:D2:33
Not cached, checking notaries: D7:12:E9:69:65:DC:F2:36:C8:74:C7:03:7D:C0:B2:24:A9:3B:D2:33
Checking host validity...
Added: Thoughtcrime Labs
Added: Qualys, Inc.
Added: Lost Signal Networks
Not setting bounce notary...
Checking checknotary: 0
Making unbounced request...
SSL proxy for notary: undefined
DNS lookup failed: -5973
DNS lookup failed: -5973
MultiDestination connection failed! , undefinedChecking checknotary: 1
Making unbounced request...
SSL proxy for notary: undefined
Active count: 4
Got connected event: 0!
Polling on handshake...
SSL handshake failed! , undefinedChecking checknotary: 2
Making unbounced request...
SSL proxy for notary: undefined
Active count: 2
Got connected event: 0!
Polling on handshake...
Polling on handshake...
Calculating PKI root...
Certificate signature status: -1
Certificate chain length: 1
Root DER certificate: SECItem(0, ctypes.unsigned_char.ptr(ctypes.UInt64("0x7f78e02b3450")), 918)
Root certificate: CERTCertificate.ptr(ctypes.UInt64("0x7f790f95c820"))
Root name: Notary
Got slots: PK11SlotList.ptr(ctypes.UInt64("0x0"))
SlotNode: null
Comparing: C9:FA:FF:7D:0F:AB:BF:43:62:99:73:D8:E8:DD:5F:1D:60:28:89:08 and C9:FA:FF:7D:0F:AB:BF:43:62:99:73:D8:E8:DD:5F:1D:60:28:89:08
Constructed!
Building request!
Sending request: POST /target/github.com+443 HTTP/1.0
Content-Type: application/x-www-form-urlencoded
Connection: close
Content-Length: 71

fingerprint=D7:12:E9:69:65:DC:F2:36:C8:74:C7:03:7D:C0:B2:24:A9:3B:D2:33
polling on read...
Read: HTTP/1.0 200 OK
Date: Fri, 01 Nov 2013 17:05:59 GMT
Content-Type: application/json
Server: TwistedWeb/8.2.0

{"fingerprintList": [{"timestamp": {"start": "1371556243", "finish": "1371556243"}, "fingerprint": "D7:12:E9:69:65:DC:F2:36:C8:74:C7:03:7D:C0:B2:24:A9:3B:D2:33"}, {"timestamp": {"start": "1311740219", "finish": "1357426589"}, "fingerprint": "CE:67:99:25:2C:AC:78:12:7D:94:B5:62:2C:31:C5:16:A6:34:73:53"}, {"timestamp": {"start": "1323659071", "finish": "1323659071"}, "fingerprint": "3B:41:43:E3:E0:D2:F4:B6:BF:36:37:58:89:3F:B2:B3:8A:3A:92:49"}], "signature": "o8hBtCupuvzBeQpwFC6OqTst85hKpJOhBFLgLTMWFwNlpKwSQP9NgE4bI64FlrrNGVsy36Xe5GoH8sF2qLyGRU04bEm8PvF5C9ZOJTToKlmrC9rq/JhhrkE9CNa26177N4jdYD93nzQP5kR6xwyEaYBqqmS/aVMkTUJTNRL/iGqfmnzb6M632O7pcnHXRGkE2V4S02paqV8tzuuRUaDogtzzbi7qUOOCLmRSHLbO8I6kF4795+G5m2Bx6a3BjrjFz3h3lXTnkqBg74BR4D+a7qegvImDGB7Hsw2/snTsXZ8tgFVE+zAq69uEPhyIqS23ygC09uVlS0jiy/Bth7wcCw=="}
Error read: 0 , -5998
Got notary response: {"fingerprintList": [{"timestamp": {"start": "1371556243", "finish": "1371556243"}, "fingerprint": "D7:12:E9:69:65:DC:F2:36:C8:74:C7:03:7D:C0:B2:24:A9:3B:D2:33"}, {"timestamp": {"start": "1311740219", "finish": "1357426589"}, "fingerprint": "CE:67:99:25:2C:AC:78:12:7D:94:B5:62:2C:31:C5:16:A6:34:73:53"}, {"timestamp": {"start": "1323659071", "finish": "1323659071"}, "fingerprint": "3B:41:43:E3:E0:D2:F4:B6:BF:36:37:58:89:3F:B2:B3:8A:3A:92:49"}], "signature": "o8hBtCupuvzBeQpwFC6OqTst85hKpJOhBFLgLTMWFwNlpKwSQP9NgE4bI64FlrrNGVsy36Xe5GoH8sF2qLyGRU04bEm8PvF5C9ZOJTToKlmrC9rq/JhhrkE9CNa26177N4jdYD93nzQP5kR6xwyEaYBqqmS/aVMkTUJTNRL/iGqfmnzb6M632O7pcnHXRGkE2V4S02paqV8tzuuRUaDogtzzbi7qUOOCLmRSHLbO8I6kF4795+G5m2Bx6a3BjrjFz3h3lXTnkqBg74BR4D+a7qegvImDGB7Hsw2/snTsXZ8tgFVE+zAq69uEPhyIqS23ygC09uVlS0jiy/Bth7wcCw=="}
Notary indicates match, checking...
Checking fingerprint: D7:12:E9:69:65:DC:F2:36:C8:74:C7:03:7D:C0:B2:24:A9:3B:D2:33 == D7:12:E9:69:65:DC:F2:36:C8:74:C7:03:7D:C0:B2:24:A9:3B:D2:33
Returning success...
COMMENT v3 extension result: 0
Handling accept event...
ConnectionWorker moving on!
ShuffleWorker accepted connection: 0x7f78ea38e8b0
Spawning connectionworker...
Posted message to ConnectionWorker!
Bailing out for wakeup...
ShuffleWorker complete!
Adding ShuffleWorker connection...
Got normal close from CLIENT
ConnectionWorker got message...
Failed to find mozsqlite3 in installed directory, checking system paths for sqlite3.
Failed to find standard sqlite3 permutations, checking debian-specific libsqlite3.so.0.
Deserializing across transport: notary.thoughtcrime.org : 80
Deserializing across transport: notary2.thoughtcrime.org : 80
Deserializing across transport: notary-us.convergence.qualys.com : 80
Deserializing across transport: notary-eu.convergence.qualys.com : 80
Deserializing across transport: notary-us-2.convergence.qualys.com : 80
Deserializing across transport: notary-eu-2.convergence.qualys.com : 80
Deserializing across transport: notary1.lostsig.net : 80
Deserializing across transport: notary2.lostsig.net : 88
Reading http headers...
Reading from FD: PRFileDesc.ptr(ctypes.UInt64("0x7f78ea38e8b0"))
Total headers: CONNECT github.com:443 HTTP/1.1
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130917 Firefox/17.0 Iceweasel/17.0.9
Proxy-Connection: keep-alive
Host: github.com

Read http headers: CONNECT github.com:443 HTTP/1.1
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130917 Firefox/17.0 Iceweasel/17.0.9
Proxy-Connection: keep-alive
Host: github.com

Calculating PKI root...
Certificate signature status: 0
Certificate chain length: 3
Root DER certificate: SECItem(0, ctypes.unsigned_char.ptr(ctypes.UInt64("0x7f790f723820")), 969)
Root certificate: CERTCertificate.ptr(ctypes.UInt64("0x7f7902224020"))
Root name: www.digicert.com
Got slots: PK11SlotList.ptr(ctypes.UInt64("0x7f78e2d0afa0"))
SlotNode: PK11SlotListElement.ptr(ctypes.UInt64("0x7f78e2d0bce0"))
Token: Builtin Object Token
Initializing certificate cache...
Checking validity...
Checking certificate cache: D7:12:E9:69:65:DC:F2:36:C8:74:C7:03:7D:C0:B2:24:A9:3B:D2:33
Not cached, checking notaries: D7:12:E9:69:65:DC:F2:36:C8:74:C7:03:7D:C0:B2:24:A9:3B:D2:33
Checking host validity...
Added: Thoughtcrime Labs
Added: Qualys, Inc.
Added: Lost Signal Networks
Not setting bounce notary...
Checking checknotary: 0
Making unbounced request...
SSL proxy for notary: undefined
Active count: 1
Got connected event: 0!
Polling on handshake...
Polling on handshake...
Calculating PKI root...
Certificate signature status: -1
Certificate chain length: 1
Root DER certificate: SECItem(0, ctypes.unsigned_char.ptr(ctypes.UInt64("0x7f790f723850")), 918)
Root certificate: CERTCertificate.ptr(ctypes.UInt64("0x7f790f95c820"))
Root name: Notary
Got slots: PK11SlotList.ptr(ctypes.UInt64("0x0"))
SlotNode: null
Comparing: C9:FA:FF:7D:0F:AB:BF:43:62:99:73:D8:E8:DD:5F:1D:60:28:89:08 and C9:FA:FF:7D:0F:AB:BF:43:62:99:73:D8:E8:DD:5F:1D:60:28:89:08
Constructed!
Building request!
Sending request: POST /target/github.com+443 HTTP/1.0
Content-Type: application/x-www-form-urlencoded
Connection: close
Content-Length: 71

fingerprint=D7:12:E9:69:65:DC:F2:36:C8:74:C7:03:7D:C0:B2:24:A9:3B:D2:33
polling on read...
Read: HTTP/1.0 200 OK
Date: Fri, 01 Nov 2013 17:06:00 GMT
Content-Type: application/json
Server: TwistedWeb/8.2.0

{"fingerprintList": [{"timestamp": {"start": "1371556243", "finish": "1371556243"}, "fingerprint": "D7:12:E9:69:65:DC:F2:36:C8:74:C7:03:7D:C0:B2:24:A9:3B:D2:33"}, {"timestamp": {"start": "1311740219", "finish": "1357426589"}, "fingerprint": "CE:67:99:25:2C:AC:78:12:7D:94:B5:62:2C:31:C5:16:A6:34:73:53"}, {"timestamp": {"start": "1323659071", "finish": "1323659071"}, "fingerprint": "3B:41:43:E3:E0:D2:F4:B6:BF:36:37:58:89:3F:B2:B3:8A:3A:92:49"}], "signature": "o8hBtCupuvzBeQpwFC6OqTst85hKpJOhBFLgLTMWFwNlpKwSQP9NgE4bI64FlrrNGVsy36Xe5GoH8sF2qLyGRU04bEm8PvF5C9ZOJTToKlmrC9rq/JhhrkE9CNa26177N4jdYD93nzQP5kR6xwyEaYBqqmS/aVMkTUJTNRL/iGqfmnzb6M632O7pcnHXRGkE2V4S02paqV8tzuuRUaDogtzzbi7qUOOCLmRSHLbO8I6kF4795+G5m2Bx6a3BjrjFz3h3lXTnkqBg74BR4D+a7qegvImDGB7Hsw2/snTsXZ8tgFVE+zAq69uEPhyIqS23ygC09uVlS0jiy/Bth7wcCw=="}
Error read: 0 , -5998
Got notary response: {"fingerprintList": [{"timestamp": {"start": "1371556243", "finish": "1371556243"}, "fingerprint": "D7:12:E9:69:65:DC:F2:36:C8:74:C7:03:7D:C0:B2:24:A9:3B:D2:33"}, {"timestamp": {"start": "1311740219", "finish": "1357426589"}, "fingerprint": "CE:67:99:25:2C:AC:78:12:7D:94:B5:62:2C:31:C5:16:A6:34:73:53"}, {"timestamp": {"start": "1323659071", "finish": "1323659071"}, "fingerprint": "3B:41:43:E3:E0:D2:F4:B6:BF:36:37:58:89:3F:B2:B3:8A:3A:92:49"}], "signature": "o8hBtCupuvzBeQpwFC6OqTst85hKpJOhBFLgLTMWFwNlpKwSQP9NgE4bI64FlrrNGVsy36Xe5GoH8sF2qLyGRU04bEm8PvF5C9ZOJTToKlmrC9rq/JhhrkE9CNa26177N4jdYD93nzQP5kR6xwyEaYBqqmS/aVMkTUJTNRL/iGqfmnzb6M632O7pcnHXRGkE2V4S02paqV8tzuuRUaDogtzzbi7qUOOCLmRSHLbO8I6kF4795+G5m2Bx6a3BjrjFz3h3lXTnkqBg74BR4D+a7qegvImDGB7Hsw2/snTsXZ8tgFVE+zAq69uEPhyIqS23ygC09uVlS0jiy/Bth7wcCw=="}
Notary indicates match, checking...
Checking fingerprint: D7:12:E9:69:65:DC:F2:36:C8:74:C7:03:7D:C0:B2:24:A9:3B:D2:33 == D7:12:E9:69:65:DC:F2:36:C8:74:C7:03:7D:C0:B2:24:A9:3B:D2:33
Returning success...
Checking checknotary: 1
Making unbounced request...
SSL proxy for notary: undefined
Active count: 1
Got connected event: 0!
Polling on handshake...
SSL handshake failed! , undefinedChecking checknotary: 2
Making unbounced request...
SSL proxy for notary: undefined
DNS lookup failed: -5973
DNS lookup failed: -5973
MultiDestination connection failed! , undefinedCOMMENT v3 extension result: 0
ConnectionWorker exception : Error completing SSL handshake! , undefined
ConnectionWorker moving on from exception...
Handling accept event...
ShuffleWorker accepted connection: 0x7f78f41bab50
Spawning connectionworker...
Posted message to ConnectionWorker!
ConnectionWorker got message...
Failed to find mozsqlite3 in installed directory, checking system paths for sqlite3.
Failed to find standard sqlite3 permutations, checking debian-specific libsqlite3.so.0.
Deserializing across transport: notary.thoughtcrime.org : 80
Deserializing across transport: notary2.thoughtcrime.org : 80
Deserializing across transport: notary-us.convergence.qualys.com : 80
Deserializing across transport: notary-eu.convergence.qualys.com : 80
Deserializing across transport: notary-us-2.convergence.qualys.com : 80
Deserializing across transport: notary-eu-2.convergence.qualys.com : 80
Deserializing across transport: notary1.lostsig.net : 80
Deserializing across transport: notary2.lostsig.net : 88
Reading http headers...
Reading from FD: PRFileDesc.ptr(ctypes.UInt64("0x7f78f41bab50"))
Total headers: CONNECT safebrowsing-cache.google.com:443 HTTP/1.1
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130917 Firefox/17.0 Iceweasel/17.0.9
Proxy-Connection: keep-alive
Host: safebrowsing-cache.google.com

Read http headers: CONNECT safebrowsing-cache.google.com:443 HTTP/1.1
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130917 Firefox/17.0 Iceweasel/17.0.9
Proxy-Connection: keep-alive
Host: safebrowsing-cache.google.com

Calculating PKI root...
Certificate signature status: 0
Certificate chain length: 3
Root DER certificate: SECItem(0, ctypes.unsigned_char.ptr(ctypes.UInt64("0x7f79038f2c28")), 856)
Root certificate: CERTCertificate.ptr(ctypes.UInt64("0x7f78f3283820"))
Got slots: PK11SlotList.ptr(ctypes.UInt64("0x7f78e2d0b960"))
SlotNode: PK11SlotListElement.ptr(ctypes.UInt64("0x7f78e2d0b9e0"))
Token: Builtin Object Token
Initializing certificate cache...
Checking validity...
Checking certificate cache: 6D:D6:6D:31:22:DB:26:BC:4B:79:E5:FF:BC:25:73:37:64:BD:9F:29
Not cached, checking notaries: 6D:D6:6D:31:22:DB:26:BC:4B:79:E5:FF:BC:25:73:37:64:BD:9F:29
Checking host validity...
Added: Thoughtcrime Labs
Added: Qualys, Inc.
Added: Lost Signal Networks
Not setting bounce notary...
Checking checknotary: 0
Making unbounced request...
SSL proxy for notary: undefined
DNS lookup failed: -5973
DNS lookup failed: -5973
MultiDestination connection failed! , undefinedChecking checknotary: 1
Making unbounced request...
SSL proxy for notary: undefined
Active count: 4
Got connected event: 0!
Polling on handshake...
SSL handshake failed! , undefinedChecking checknotary: 2
Making unbounced request...
SSL proxy for notary: undefined
Active count: 2
Got connected event: 0!
Polling on handshake...
Polling on handshake...
Calculating PKI root...
Certificate signature status: -1
Certificate chain length: 1
Root DER certificate: SECItem(0, ctypes.unsigned_char.ptr(ctypes.UInt64("0x7f7903713050")), 918)
Root certificate: CERTCertificate.ptr(ctypes.UInt64("0x7f790f95c820"))
Root name: Notary
Got slots: PK11SlotList.ptr(ctypes.UInt64("0x0"))
SlotNode: null
Comparing: C9:FA:FF:7D:0F:AB:BF:43:62:99:73:D8:E8:DD:5F:1D:60:28:89:08 and C9:FA:FF:7D:0F:AB:BF:43:62:99:73:D8:E8:DD:5F:1D:60:28:89:08
Constructed!
Building request!
Sending request: POST /target/safebrowsing-cache.google.com+443 HTTP/1.0
Content-Type: application/x-www-form-urlencoded
Connection: close
Content-Length: 71

fingerprint=6D:D6:6D:31:22:DB:26:BC:4B:79:E5:FF:BC:25:73:37:64:BD:9F:29
polling on read...
polling on read...
polling on read...
Read: HTTP/1.0 409 Conflict
Date: Fri, 01 Nov 2013 17:07:38 GMT
Content-Type: application/json
Server: TwistedWeb/8.2.0

{"fingerprintList": [{"timestamp": {"start": "1382445596", "finish": "1383325659"}, "fingerprint": "67:1B:98:92:48:86:FF:E1:C5:02:44:C5:9F:F3:96:78:08:F5:0A:45"}, {"timestamp": {"start": "1380488306", "finish": "1380488306"}, "fingerprint": "54:A7:34:39:1B:2A:EC:B8:92:68:DC:3A:3E:FE:2B:D3:91:ED:23:1F"}, {"timestamp": {"start": "1377837956", "finish": "1377874181"}, "fingerprint": "FE:8E:52:80:8E:59:8A:14:5C:48:1C:BA:39:32:A2:EF:31:5F:33:14"}, {"timestamp": {"start": "1377155835", "finish": "1377155835"}, "fingerprint": "C8:E4:8C:62:9B:0C:45:F8:C0:03:A1:C6:10:F2:38:4F:B0:AD:53:3B"}, {"timestamp": {"start": "1375868441", "finish": "1376910415"}, "fingerprint": "39:DC:17:9F:C4:DC:67:32:E2:02:5A:B9:C4:18:D7:9D:4E:1C:6E:94"}, {"timestamp": {"start": "1375087883", "finish": "1375087883"}, "fingerprint": "CA:F0:7F:F6:1F:C7:F7:0A:CC:5D:BE:E0:DA:E3:4E:48:23:61:29:A5"}, {"timestamp": {"start": "1373872977", "finish": "1373872977"}, "fingerprint": "47:BF:C6:30:18:4F:14:ED:3C:44:7E:DD:9B:BF:7A:F8:1A:2C:58:28"}, {"timestamp": {"start": "1372835958", "finish": "1372844326"}, "fingerprint": "18:8B:18:4D:9D:99:07:D3:40:E0:6D:0E:52:EC:93:3E:CF:C5:FE:C8"}, {"timestamp": {"start": "1357754917", "finish": "1358461644"}, "fingerprint": "4B:B7:CC:81:2C:B9:00:3A:75:97:10:27:43:61:0B:93:D9:7C:3C:19"}, {"timestamp": {"start": "1355292633", "finish": "1357829086"}, "fingerprint": "CA:5E:A3:F8:40:90:6B:EA:25:19:6F:A8:A1:82:BB:6C:6B:2D:96:85"}, {"timestamp": {"start": "1354489727", "finish": "1355278209"}, "fingerprint": "A3:C5:6A:D9:D2:34:5B:9F:B6:92:6D:5A:79:FF:F9:72:37:1E:FD:4D"}, {"timestamp": {"start": "1351794663", "finish": "1351794663"}, "fingerprint": "01:91:C5:23:25:1E:5A:6F:73:39:19:31:AD:39:4C:8F:EF:1E:9D:B7"}, {"timestamp": {"start": "1350587108", "finish": "1351784564"}, "fingerprint": "D0:9C:03:BE:6D:8A:80:32:EA:52:9B:95:F4:26:2C:55:87:FB:DF:A7"}, {"timestamp": {"start": "1349343773", "finish": "1350582081"}, "fingerprint": "99:9B:2C:AC:BF:65:CC:74:61:DF:ED:05:6D:F6:22:A9:D6:E1:BA:9F"}, {"timestamp": {"start": "1348282197", "finish": "1349298771"}, "fingerprint": "9F:AF:B9:CE:B5:10:97:C0:5D:16:90:11:63:78:FA:2F:37:F4:96:79"}, {"timestamp": {"start": "1345839621", "finish": "1348129452"}, "fingerprint": "25:A7:A0:0B:85:B1:25:D4:EB:BE:05:E0:8B:72:47:9E:C3:4B:22:5B"}, {"timestamp": {"start": "1345199982", "finish": "1345698360"}, "fingerprint": "3B:2F:54:8F:4C:FC:C2:A2:F1:0F:99:2C:87:93:E3:56:15:C3:AC:A7"}, {"timestamp": {"start": "1344634927", "finish": "1345159053"}, "fingerprint": "56:7E:72:30:90:DB:16:E1:A9:65:8F:5A:7B:18:59:52:01:F7:64:D7"}, {"timestamp": {"start": "1342026817", "finish": "1344556762"}, "fingerprint": "C4:0C:C8:54:D7:C9:FC:5F:B5:8B:38:53:31:6D:05:11:B4:53:9D:1B"}, {"timestamp": {"start": "1340878387", "finish": "1342025045"}, "fingerprint": "FF:9F:D5:6F:1C:6C:B4:44:55:EF:84:EE:E5:9C:C8:AD:FA:D8:A5:AD"}, {"timestamp": {"start": "1339132814", "finish": "1340582736"}, "fingerprint": "C3:FE:90:AB:92:55:AC:C9:D8:63:37:D2:8B:25:67:8A:68:94:F9:05"}, {"timestamp": {"start": "1339709362", "finish": "1340462418"}, "fingerprint": "44:0E:34:BC:C6:5F:C6:D5:55:24:C3:A3:92:D3:9E:44:E3:31:87:C1"}, {"timestamp": {"start": "1338441207", "finish": "1339025339"}, "fingerprint": "95:E2:82:70:B9:09:5D:E0:FB:33:06:86:72:41:94:49:5E:47:ED:E0"}, {"timestamp": {"start": "1337901458", "finish": "1338389504"}, "fingerprint": "8E:AB:3A:93:45:99:6B:95:07:71:7A:C2:1F:68:90:AF:78:A9:3C:9A"}, {"timestamp": {"start": "1337306297", "finish": "1337814241"}, "fingerprint": "97:1A:9F:06:54:23:96:B8:FA:3F:D8:78:C1:BF:84:34:4B:5E:CB:30"}, {"timestamp": {"start": "1336815899", "finish": "1337210843"}, "fingerprint": "CA:6E:3C:B1:BC:C6:B9:FF:63:FD:70:64:2B:E7:36:07:E3:64:62:49"}, {"timestamp": {"start": "1336078479", "finish": "1336778074"}, "fingerprint": "51:F2:5B:A9:C0:AF:C8:81:9F:48:23:43:C8:7F:49:00:5F:28:EE:D5"}, {"timestamp": {"start": "1334922614", "finish": "1336074933"}, "fingerprint": "8F:05:FC:C2:E3:C9:2E:C6:88:8C:F7:62:F4:64
Read: :92:35:57:45:39:14"}], "signature": "CrWmIzhXlx5YyzPSxs0lbwLsvLcB7/dqwkeAMjTpS0bRk/QjbbM8a2/xO2UDMp1FbPx45Dr1P1/2Jjri0a6Spniadgq7ru0QvZiu8WmG/cxT3QcA8HNRPFl//gzgRchhnd+FC1x1UntasiFfPcRiYCnMslVHU7S4kq7I4RUbnB2TtScnGxgh1b6e+DGwO8/BmUwCZo8UNNppe/EoteLyDd0oyXPZjpMlLo0YNSmaOirG4RA/z2ek20KaVwiiU/bebcZYgQC8LjF7x+m71O4/4IE1DCbxoHpMpXOjGxOLJOfzdL0pm2lcOta9IqGQn6teMbhyvGlJwIkJ3qEQWKYdng=="}
Error read: 0 , -5998
Got notary response: {"fingerprintList": [{"timestamp": {"start": "1382445596", "finish": "1383325659"}, "fingerprint": "67:1B:98:92:48:86:FF:E1:C5:02:44:C5:9F:F3:96:78:08:F5:0A:45"}, {"timestamp": {"start": "1380488306", "finish": "1380488306"}, "fingerprint": "54:A7:34:39:1B:2A:EC:B8:92:68:DC:3A:3E:FE:2B:D3:91:ED:23:1F"}, {"timestamp": {"start": "1377837956", "finish": "1377874181"}, "fingerprint": "FE:8E:52:80:8E:59:8A:14:5C:48:1C:BA:39:32:A2:EF:31:5F:33:14"}, {"timestamp": {"start": "1377155835", "finish": "1377155835"}, "fingerprint": "C8:E4:8C:62:9B:0C:45:F8:C0:03:A1:C6:10:F2:38:4F:B0:AD:53:3B"}, {"timestamp": {"start": "1375868441", "finish": "1376910415"}, "fingerprint": "39:DC:17:9F:C4:DC:67:32:E2:02:5A:B9:C4:18:D7:9D:4E:1C:6E:94"}, {"timestamp": {"start": "1375087883", "finish": "1375087883"}, "fingerprint": "CA:F0:7F:F6:1F:C7:F7:0A:CC:5D:BE:E0:DA:E3:4E:48:23:61:29:A5"}, {"timestamp": {"start": "1373872977", "finish": "1373872977"}, "fingerprint": "47:BF:C6:30:18:4F:14:ED:3C:44:7E:DD:9B:BF:7A:F8:1A:2C:58:28"}, {"timestamp": {"start": "1372835958", "finish": "1372844326"}, "fingerprint": "18:8B:18:4D:9D:99:07:D3:40:E0:6D:0E:52:EC:93:3E:CF:C5:FE:C8"}, {"timestamp": {"start": "1357754917", "finish": "1358461644"}, "fingerprint": "4B:B7:CC:81:2C:B9:00:3A:75:97:10:27:43:61:0B:93:D9:7C:3C:19"}, {"timestamp": {"start": "1355292633", "finish": "1357829086"}, "fingerprint": "CA:5E:A3:F8:40:90:6B:EA:25:19:6F:A8:A1:82:BB:6C:6B:2D:96:85"}, {"timestamp": {"start": "1354489727", "finish": "1355278209"}, "fingerprint": "A3:C5:6A:D9:D2:34:5B:9F:B6:92:6D:5A:79:FF:F9:72:37:1E:FD:4D"}, {"timestamp": {"start": "1351794663", "finish": "1351794663"}, "fingerprint": "01:91:C5:23:25:1E:5A:6F:73:39:19:31:AD:39:4C:8F:EF:1E:9D:B7"}, {"timestamp": {"start": "1350587108", "finish": "1351784564"}, "fingerprint": "D0:9C:03:BE:6D:8A:80:32:EA:52:9B:95:F4:26:2C:55:87:FB:DF:A7"}, {"timestamp": {"start": "1349343773", "finish": "1350582081"}, "fingerprint": "99:9B:2C:AC:BF:65:CC:74:61:DF:ED:05:6D:F6:22:A9:D6:E1:BA:9F"}, {"timestamp": {"start": "1348282197", "finish": "1349298771"}, "fingerprint": "9F:AF:B9:CE:B5:10:97:C0:5D:16:90:11:63:78:FA:2F:37:F4:96:79"}, {"timestamp": {"start": "1345839621", "finish": "1348129452"}, "fingerprint": "25:A7:A0:0B:85:B1:25:D4:EB:BE:05:E0:8B:72:47:9E:C3:4B:22:5B"}, {"timestamp": {"start": "1345199982", "finish": "1345698360"}, "fingerprint": "3B:2F:54:8F:4C:FC:C2:A2:F1:0F:99:2C:87:93:E3:56:15:C3:AC:A7"}, {"timestamp": {"start": "1344634927", "finish": "1345159053"}, "fingerprint": "56:7E:72:30:90:DB:16:E1:A9:65:8F:5A:7B:18:59:52:01:F7:64:D7"}, {"timestamp": {"start": "1342026817", "finish": "1344556762"}, "fingerprint": "C4:0C:C8:54:D7:C9:FC:5F:B5:8B:38:53:31:6D:05:11:B4:53:9D:1B"}, {"timestamp": {"start": "1340878387", "finish": "1342025045"}, "fingerprint": "FF:9F:D5:6F:1C:6C:B4:44:55:EF:84:EE:E5:9C:C8:AD:FA:D8:A5:AD"}, {"timestamp": {"start": "1339132814", "finish": "1340582736"}, "fingerprint": "C3:FE:90:AB:92:55:AC:C9:D8:63:37:D2:8B:25:67:8A:68:94:F9:05"}, {"timestamp": {"start": "1339709362", "finish": "1340462418"}, "fingerprint": "44:0E:34:BC:C6:5F:C6:D5:55:24:C3:A3:92:D3:9E:44:E3:31:87:C1"}, {"timestamp": {"start": "1338441207", "finish": "1339025339"}, "fingerprint": "95:E2:82:70:B9:09:5D:E0:FB:33:06:86:72:41:94:49:5E:47:ED:E0"}, {"timestamp": {"start": "1337901458", "finish": "1338389504"}, "fingerprint": "8E:AB:3A:93:45:99:6B:95:07:71:7A:C2:1F:68:90:AF:78:A9:3C:9A"}, {"timestamp": {"start": "1337306297", "finish": "1337814241"}, "fingerprint": "97:1A:9F:06:54:23:96:B8:FA:3F:D8:78:C1:BF:84:34:4B:5E:CB:30"}, {"timestamp": {"start": "1336815899", "finish": "1337210843"}, "fingerprint": "CA:6E:3C:B1:BC:C6:B9:FF:63:FD:70:64:2B:E7:36:07:E3:64:62:49"}, {"timestamp": {"start": "1336078479", "finish": "1336778074"}, "fingerprint": "51:F2:5B:A9:C0:AF:C8:81:9F:48:23:43:C8:7F:49:00:5F:28:EE:D5"}, {"timestamp": {"start": "1334922614", "finish": "1336074933"}, "fingerprint": "8F:05:FC:C2:E3:C9:2E:C6:88:8C:F7:62:F4:64:92:35:57:45:39:14"}], "signature": "CrWmIzhXlx5YyzPSxs0lbwLsvLcB7/dqwkeAMjTpS0bRk/QjbbM8a2/xO2UDMp1FbPx45Dr1P1/2Jjri0a6Spniadgq7ru0QvZiu8WmG/cxT3QcA8HNRPFl//gzgRchhnd+FC1x1UntasiFfPcRiYCnMslVHU7S4kq7I4RUbnB2TtScnGxgh1b6e+DGwO8/BmUwCZo8UNNppe/EoteLyDd0oyXPZjpMlLo0YNSmaOirG4RA/z2ek20KaVwiiU/bebcZYgQC8LjF7x+m71O4/4IE1DCbxoHpMpXOjGxOLJOfzdL0pm2lcOta9IqGQn6teMbhyvGlJwIkJ3qEQWKYdng=="}
Notary failed to find matching fingerprint!
COMMENT v3 extension result: 0
ConnectionWorker moving on!
Bailing out for wakeup...
ShuffleWorker complete!
Adding ShuffleWorker connection...
Got normal close from CLIENT
DiagonalArg commented 10 years ago

I'm able to go to about 3/4 of the web sites I go to. GitHub is not one of them (the spinner goes forever). I notice that when one web site is unreachable (eg linkedin.com), then a web site that links to it (eg commondreams.org) is unable to load (or actually, it partially loads, and then sits there).

The other thing I notice, is that my cache manager has nothing listed, even though I have successfully gone to many sites.

@djpavon - What is the "yellow Authentication error bar" that you're talking about? I don't see any such thing on my browser.

[Ubuntu 12.04, FF 25.01, Convergence 0.09]