New issue
Advanced search Search tips

Issue 616440 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner:
Closed: Jun 2016
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

chrome sends insane request for sub sub domains

Reported by christop...@gmail.com, Jun 1 2016

Issue description

UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.87 Safari/537.36

Example URL:
dev.tet.freefreecrowdfunding.org

Steps to reproduce the problem:
1. try and go to this url
2. chrome sends an embedded base 64 image as the Request (the mluti image with the little pixel dinosaur in it)
3. Ummm... get an https error

What is the expected behavior?
Umm. .sends  a request to the server for a webpage :)

What went wrong?
well. the server doesnt know what to do wiht the image lol

Did this work before? N/A 

Chrome version: 49.0.2623.87  Channel: n/a
OS Version: 
Flash Version: Shockwave Flash 21.0 r0
 
Screenshot from 2016-06-01 13:31:57.png
204 KB View Download
Labels: Needs-Feedback
I am not able to reach the given URL on either Chrome or Firefox as server's DNS could not be found. 
Could you please verify if you are able to navigate to this URL from any other browser. If that is successful, please try on latest stable chrome version and if the problem still persists, please provide the net log. 
The instructions for getting net log are given here for desktop/mobile:  https://sites.google.com/a/chromium.org/dev/for-testers/providing-network-details

Thanks.
hi.Thanks
Here is some things:


net-internals-log.json
775 KB View Download
I have readded the dns entry
firefox doesnt seem to like the certficiate
I just updated to the latest chrome stable
Version 51.0.2704.63 (64-bit)

same issue. its proper hilarious
Project Member

Comment 6 by sheriffbot@chromium.org, Jun 1 2016

Labels: -Needs-Feedback Needs-Review
Owner: shivanisha@chromium.org
Thank you for providing more feedback. Adding requester "shivanisha@chromium.org" for another review and adding "Needs-Review" label for tracking.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Components: -Internals>Network Internals>Network>SSL
I was able to reproduce this at my end and this is what netlog shows as the error:
t=239643 [st=21]        SSL_VERSION_FALLBACK
                        --> TLS 1.2 ==> TLS 1.1
                        --> host_and_port = "dev.tet.freefreecrowdfunding.org:443"
                        --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
                        --> ssl_failure_state = 2

Updating component to SSL to verify what could be causing this as I am not aware of the details here.

Also pasting the complete URL Request here:
111199: URL_REQUEST
https://dev.tet.freefreecrowdfunding.org/
Start Time: 2016-06-02 15:36:51.449

t=239622 [st= 0] +REQUEST_ALIVE  [dt=39]
t=239622 [st= 0]    DELEGATE_INFO  [dt=1]
                    --> delegate_info = "NavigationResourceThrottle"
t=239623 [st= 1]    URL_REQUEST_DELEGATE  [dt=0]
t=239624 [st= 2]    URL_REQUEST_START_JOB  [dt=0]
                    --> load_flags = 37120 (MAIN_FRAME | MAYBE_USER_GESTURE | VERIFY_EV_CERT)
                    --> method = "GET"
                    --> priority = "HIGHEST"
                    --> url = "https://dev.tet.freefreecrowdfunding.org/"
t=239624 [st= 2]   +URL_REQUEST_START_JOB  [dt=37]
                    --> load_flags = 37120 (MAIN_FRAME | MAYBE_USER_GESTURE | VERIFY_EV_CERT)
                    --> method = "GET"
                    --> priority = "HIGHEST"
                    --> url = "https://dev.tet.freefreecrowdfunding.org/"
t=239624 [st= 2]      URL_REQUEST_DELEGATE  [dt=0]
t=239624 [st= 2]      HTTP_CACHE_GET_BACKEND  [dt=0]
t=239624 [st= 2]      HTTP_CACHE_OPEN_ENTRY  [dt=0]
                      --> net_error = -2 (ERR_FAILED)
t=239624 [st= 2]      HTTP_CACHE_CREATE_ENTRY  [dt=0]
t=239624 [st= 2]      HTTP_CACHE_ADD_TO_ENTRY  [dt=0]
t=239624 [st= 2]      URL_REQUEST_DELEGATE  [dt=0]
t=239624 [st= 2]     +HTTP_STREAM_REQUEST  [dt=19]
t=239624 [st= 2]        HTTP_STREAM_REQUEST_STARTED_JOB
                        --> source_dependency = 111203 (HTTP_STREAM_JOB)
t=239643 [st=21]        HTTP_STREAM_REQUEST_BOUND_TO_JOB
                        --> source_dependency = 111203 (HTTP_STREAM_JOB)
t=239643 [st=21]        SSL_VERSION_FALLBACK
                        --> TLS 1.2 ==> TLS 1.1
                        --> host_and_port = "dev.tet.freefreecrowdfunding.org:443"
                        --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
                        --> ssl_failure_state = 2
t=239643 [st=21]     -HTTP_STREAM_REQUEST
t=239643 [st=21]     +HTTP_STREAM_REQUEST  [dt=18]
t=239643 [st=21]        HTTP_STREAM_REQUEST_STARTED_JOB
                        --> source_dependency = 111207 (HTTP_STREAM_JOB)
t=239661 [st=39]        HTTP_STREAM_REQUEST_BOUND_TO_JOB
                        --> source_dependency = 111207 (HTTP_STREAM_JOB)
t=239661 [st=39]     -HTTP_STREAM_REQUEST
t=239661 [st=39]   -URL_REQUEST_START_JOB
                    --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
t=239661 [st=39]    URL_REQUEST_DELEGATE  [dt=0]
t=239661 [st=39] -REQUEST_ALIVE
                  --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
Labels: -Needs-Review Needs-Feedback
I'm not able to get this site to load in anything. Are you sure it works at all? In what browsers does it actually work?

(The fallback is a red herring. The real error is ERR_SSL_PROTOCOL_ERROR.)
Ok, Ill point a different DNS entry at the server, and add that to the nginxconfig for the same server edfinition... hang on....

There, I have done that. So its the same response as "christopher.freefreecrowdfunding.org" which works fine.

The point here for me is that the browser is **sending** this as the request url: 
Request URL:data:image/png;base64,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
Request Method:GET
Status Code:200 OK (from cache)


The browser is actually not sending the URL that you are seeing in dev tools. From net-log pasted in #7 we can see that the browser is sending "https://dev.tet.freefreecrowdfunding.org/" as the URL.
As #8 mentions, it is a red herring, the real error is  ERR_SSL_PROTOCOL_ERROR.
Components: Platform>DevTools>Network
That's just part of the network error page. Our network error page is implemented with HTML and uses data URLs for images. That particular image is part of the dinosaur easter egg game in the error page. I guess DevTools shows those requests because it thinks you're debugging the network error page? Meh. I'll add the DevTools label on the off chance they think that's something to change.

However, none of this has anything to do with why your server is failing to load. Your server is, for whatever reason, failing to respond to our TLS handshakes. I'm seeing an internal_error alert, so I guess you should check your server logs. I can't connect to it with any other browser either (can you?). There does not appear to be anything to fix on Chrome's end here.
Owner: ----
Did you checkout "https://christopher.freefreecrowdfunding.org" its being served by the same configuration as dev.tet

here are the ssl outputs I get at my local machine:

http://paste.ofcode.org/BbspCQAscc5LQ2ERpCbYvS

Curl seems to have some issues. Im not sure why. I will check.

THanks
That cert is generated by cloudflare. ITs the same cert as is sent by https://christopher.....

Will dig in
Project Member

Comment 15 by sheriffbot@chromium.org, Jun 3 2016

Labels: -Needs-Feedback Needs-Review
Owner: davidben@chromium.org
Thank you for providing more feedback. Adding requester "davidben@chromium.org" for another review and adding "Needs-Review" label for tracking.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Status: WontFix (was: Unconfirmed)
https://christopher.freefreecrowdfunding.org loads just fine here.

Going ahead and closing this. dev.tet seems to not load in anything, so it's clearly a server-side issue.
dev.tet is exactly the same server as christopher
The SSL certificate is the *SAME* certificate for both URLs, and contains the correct SAN.
That is the point. I set it up like that to show what is going on.
There is nothing logical about your response
The server doesn't load in Chrome, cURL, Firefox, Internet Explorer, Safari, or SSL Labs. It is sending an internal_error alert which suggests the server is misconfigured or broken in some way.

Is this a CloudFlare server? I would suggest you talk to them. If you're using the same certificate, it appears that certificate is only good for *.freefreecrowdfunding.org which isn't good for dev.tet. Wildcards only match one label. Perhaps CloudFlare returns internal_error if you connect to it with a host they don't have a certificate for?

Whatever the cause, there is no reason to believe it is an issue in Chrome/Chromium. This is Chromium's bug tracker. Thus, I closed this.

Sign in to add a comment