New issue
Advanced search Search tips

Issue 654359 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner:
Closed: Nov 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

ERR_SSL_PROTOCOL_ERROR but Secure Resources

Reported by bau...@gmail.com, Oct 10 2016

Issue description

UserAgent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.50 Safari/537.36

Steps to reproduce the problem:
1. I open admin web page (RSA security console, manage RSA token), it's internal server.

What is the expected behavior?
open page same as Internet Explorer or display detailed error

What went wrong?
display ERR_SSL_PROTOCOL_ERROR

Did this work before? N/A 

Chrome version: 53.0.2785.116  Channel: stable
OS Version: 6.1
Flash Version: 

export with chrome://net-internals not work, stay on 'Preparing data...'
 
chrome 301.png
29.7 KB View Download
chrome 302.png
20.4 KB View Download
chrome 303.png
18.9 KB View Download
chrome 304.png
19.6 KB View Download

Comment 1 by mef@chromium.org, Oct 10 2016

Components: Internals>Network>SSL
Cc: mmenke@chromium.org
Components: -UI Internals>Network>Logging
Labels: Needs-Feedback
Logging folks, do you know why exporting from net-internals wouldn't be working?

baudev: If you can't get net-internals to export, please include the SOCKET event, rather than the HTTP_STREAM_JOB. This one isn't quite enough to find out what's going on. Filter in the search field for:

  type:socket ERR_SSL_PROTOCOL_ERROR

Thanks!

Comment 3 by mmenke@chromium.org, Oct 10 2016

Hrm...No idea.  This is the first I've hard of this happening.  Can't seem to reproduce that.

Comment 4 Deleted

Comment 5 by bau...@gmail.com, Oct 10 2016

204: CONNECT_JOB
ssl/*******:7004
Start Time: 2016-10-10 18:09:11.226

t=1 [st=0] +SOCKET_POOL_CONNECT_JOB  [dt=8]
            --> group_name = "ssl/*******:7004"
t=1 [st=0]   +SOCKET_POOL_CONNECT_JOB_CONNECT  [dt=8]
t=1 [st=0]      TCP_CLIENT_SOCKET_POOL_REQUESTED_SOCKET
                --> host_and_port = "*******:7004"
t=1 [st=0]     +SOCKET_POOL  [dt=4]
t=5 [st=4]        SOCKET_POOL_BOUND_TO_CONNECT_JOB
                  --> source_dependency = 205 (CONNECT_JOB)
t=5 [st=4]        SOCKET_POOL_BOUND_TO_SOCKET
                  --> source_dependency = 206 (SOCKET)
t=5 [st=4]     -SOCKET_POOL
t=9 [st=8]   -SOCKET_POOL_CONNECT_JOB_CONNECT
              --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
t=9 [st=8] -SOCKET_POOL_CONNECT_JOB




206: SOCKET
ssl/*******:7004
Start Time: 2016-10-10 18:09:11.226

t=1 [st=0] +SOCKET_ALIVE  [dt=8]
            --> source_dependency = 205 (CONNECT_JOB)
t=1 [st=0]   +TCP_CONNECT  [dt=3]
              --> address_list = ["10.****.15:7004"]
t=1 [st=0]      TCP_CONNECT_ATTEMPT  [dt=3]
                --> address = "10.****.15:7004"
t=4 [st=3]   -TCP_CONNECT
              --> source_address = "10.****.100:57775"
t=5 [st=4]   +SOCKET_IN_USE  [dt=4]
              --> source_dependency = 204 (CONNECT_JOB)
t=5 [st=4]     +SSL_CONNECT  [dt=4]
t=6 [st=5]        SOCKET_BYTES_SENT
                  --> byte_count = 203
t=9 [st=8]        SOCKET_BYTES_RECEIVED
                  --> byte_count = 7
t=9 [st=8]        SSL_HANDSHAKE_ERROR
                  --> error_lib = 16
                  --> error_reason = 1047
                  --> file = "c:\\b\\build\\slave\\win64-pgo\\build\\src\\third_party\\boringssl\\src\\ssl\\tls_record.c"
                  --> line = 462
                  --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
                  --> ssl_error = 1
t=9 [st=8]     -SSL_CONNECT
                --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
t=9 [st=8]      SOCKET_CLOSED
t=9 [st=8]   -SOCKET_IN_USE
t=9 [st=8] -SOCKET_ALIVE


208: CONNECT_JOB
ssl/*******:7004
Start Time: 2016-10-10 18:09:11.227

t= 2 [st=0] +SOCKET_POOL_CONNECT_JOB  [dt=8]
             --> group_name = "ssl/*******:7004"
t= 2 [st=0]   +SOCKET_POOL_CONNECT_JOB_CONNECT  [dt=7]
t= 2 [st=0]      TCP_CLIENT_SOCKET_POOL_REQUESTED_SOCKET
                 --> host_and_port = "*******:7004"
t= 2 [st=0]     +SOCKET_POOL  [dt=4]
t= 6 [st=4]        SOCKET_POOL_BOUND_TO_CONNECT_JOB
                   --> source_dependency = 209 (CONNECT_JOB)
t= 6 [st=4]        SOCKET_POOL_BOUND_TO_SOCKET
                   --> source_dependency = 210 (SOCKET)
t= 6 [st=4]     -SOCKET_POOL
t= 9 [st=7]   -SOCKET_POOL_CONNECT_JOB_CONNECT
               --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
t=10 [st=8] -SOCKET_POOL_CONNECT_JOB


210: SOCKET
ssl/*******:7004
Start Time: 2016-10-10 18:09:11.227

t=2 [st=0] +SOCKET_ALIVE  [dt=7]
            --> source_dependency = 209 (CONNECT_JOB)
t=2 [st=0]   +TCP_CONNECT  [dt=4]
              --> address_list = ["10.****.15:7004"]
t=3 [st=1]      TCP_CONNECT_ATTEMPT  [dt=3]
                --> address = "10.195.251.15:7004"
t=6 [st=4]   -TCP_CONNECT
              --> source_address = "10.****.100:57776"
t=6 [st=4]   +SOCKET_IN_USE  [dt=3]
              --> source_dependency = 208 (CONNECT_JOB)
t=6 [st=4]     +SSL_CONNECT  [dt=3]
t=6 [st=4]        SOCKET_BYTES_SENT
                  --> byte_count = 203
t=9 [st=7]        SOCKET_BYTES_RECEIVED
                  --> byte_count = 7
t=9 [st=7]        SSL_HANDSHAKE_ERROR
                  --> error_lib = 16
                  --> error_reason = 1047
                  --> file = "c:\\b\\build\\slave\\win64-pgo\\build\\src\\third_party\\boringssl\\src\\ssl\\tls_record.c"
                  --> line = 462
                  --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
                  --> ssl_error = 1
t=9 [st=7]     -SSL_CONNECT
                --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
t=9 [st=7]      SOCKET_CLOSED
t=9 [st=7]   -SOCKET_IN_USE
t=9 [st=7] -SOCKET_ALIVE



214: HTTP_STREAM_JOB
https://*******:7004/
Start Time: 2016-10-10 18:09:11.233

t= 8 [st=0] +HTTP_STREAM_JOB  [dt=2]
             --> alternative_service = "Uninitialized :0"
             --> original_url = "https://*******:7004/"
             --> priority = "HIGHEST"
             --> source_dependency = 211 (URL_REQUEST)
             --> url = "https://*******:7004/"
t= 8 [st=0]   +PROXY_SERVICE  [dt=0]
t= 8 [st=0]      PROXY_SERVICE_RESOLVED_PROXY_LIST
                 --> pac_string = "DIRECT"
t= 8 [st=0]   -PROXY_SERVICE
t= 8 [st=0]   +HOST_RESOLVER_IMPL_REQUEST  [dt=0]
               --> address_family = 0
               --> allow_cached_response = true
               --> host = "*******:7004"
               --> is_speculative = false
t= 8 [st=0]      HOST_RESOLVER_IMPL_IPV6_REACHABILITY_CHECK
                 --> cached = true
                 --> ipv6_available = false
t= 8 [st=0]      HOST_RESOLVER_IMPL_CACHE_HIT
t= 8 [st=0]   -HOST_RESOLVER_IMPL_REQUEST
t= 8 [st=0]   +SOCKET_POOL  [dt=1]
t= 9 [st=1]      SOCKET_POOL_BOUND_TO_CONNECT_JOB
                 --> source_dependency = 204 (CONNECT_JOB)
t= 9 [st=1]   -SOCKET_POOL
               --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
t=10 [st=2]    HTTP_STREAM_JOB_BOUND_TO_REQUEST
               --> source_dependency = 211 (URL_REQUEST)
t=10 [st=2] -HTTP_STREAM_JOB
chrome305.png
24.5 KB View Download
Huh, that's the first time I've seen one of those. That's an illegal_parameter alert. Did this work in earlier releases of Chrome? I think the only change we made was removing DHE ciphers, but that would manifested differently.

What software is this server running? Is there a publicly-accessible version somewhere so we can look at it? In general, most SSL errors are only diagnosable at the server or with an instance to play with (so I can vary our ClientHello and see what is making it unhappy).

Comment 7 by bau...@gmail.com, Oct 10 2016

same error with old chrome Version 44.0.2403.157.

It's an appliance from RSA security Radius server (https://www.rsa.com/en-us/products-services/identity-access-management/securid/authentication-manager), and no external access.


468: CONNECT_JOB
ssl/devapps***:7004
Start Time: 2016-10-10 19:14:25.732

t= 1 [st= 0] +SOCKET_POOL_CONNECT_JOB  [dt=11]
              --> group_name = "ssl/devapps***:7004"
t= 1 [st= 0]   +SOCKET_POOL_CONNECT_JOB_CONNECT  [dt=10]
t= 1 [st= 0]      TCP_CLIENT_SOCKET_POOL_REQUESTED_SOCKET
                  --> host_and_port = "devapps***:7004"
t= 1 [st= 0]     +SOCKET_POOL  [dt=8]
t= 9 [st= 8]        SOCKET_POOL_BOUND_TO_CONNECT_JOB
                    --> source_dependency = 473 (CONNECT_JOB)
t= 9 [st= 8]        SOCKET_POOL_BOUND_TO_SOCKET
                    --> source_dependency = 477 (SOCKET)
t= 9 [st= 8]     -SOCKET_POOL
t=11 [st=10]   -SOCKET_POOL_CONNECT_JOB_CONNECT
                --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
t=12 [st=11] -SOCKET_POOL_CONNECT_JOB




469: CONNECT_JOB
ssl/devapps***:7004
Start Time: 2016-10-10 19:14:25.732

t=   1 [st=   0] +SOCKET_POOL_CONNECT_JOB  [dt=3010]
                  --> group_name = "ssl/devapps***:7004"
t=   1 [st=   0]   +SOCKET_POOL_CONNECT_JOB_CONNECT  [dt=3010]
t=   1 [st=   0]     +HOST_RESOLVER_IMPL_REQUEST  [dt=4]
                      --> address_family = 0
                      --> allow_cached_response = true
                      --> host = "devapps***:7004"
                      --> is_speculative = false
t=   1 [st=   0]        HOST_RESOLVER_IMPL_IPV6_REACHABILITY_CHECK
                        --> cached = true
                        --> ipv6_available = false
t=   1 [st=   0]        HOST_RESOLVER_IMPL_CREATE_JOB
t=   1 [st=   0]        HOST_RESOLVER_IMPL_JOB_ATTACH
                        --> source_dependency = 470 (HOST_RESOLVER_IMPL_JOB)
t=   5 [st=   4]     -HOST_RESOLVER_IMPL_REQUEST
t=3011 [st=3010]      CONNECT_JOB_SET_SOCKET
                      --> source_dependency = 476 (SOCKET)
t=3011 [st=3010]   -SOCKET_POOL_CONNECT_JOB_CONNECT
t=3011 [st=3010] -SOCKET_POOL_CONNECT_JOB



470: HOST_RESOLVER_IMPL_JOB
devapps***
Start Time: 2016-10-10 19:14:25.732

t=1 [st=0] +HOST_RESOLVER_IMPL_JOB  [dt=4]
            --> host = "devapps***"
            --> source_dependency = 469 (CONNECT_JOB)
t=1 [st=0]    HOST_RESOLVER_IMPL_JOB_STARTED
t=1 [st=0]   +HOST_RESOLVER_IMPL_PROC_TASK  [dt=4]
t=1 [st=0]      HOST_RESOLVER_IMPL_ATTEMPT_STARTED
                --> attempt_number = 1
t=1 [st=0]      HOST_RESOLVER_IMPL_JOB_REQUEST_ATTACH
                --> priority = "LOWEST"
                --> source_dependency = 469 (CONNECT_JOB)
t=2 [st=1]      HOST_RESOLVER_IMPL_JOB_REQUEST_ATTACH
                --> priority = "LOWEST"
                --> source_dependency = 473 (CONNECT_JOB)
t=4 [st=3]      HOST_RESOLVER_IMPL_ATTEMPT_FINISHED
                --> attempt_number = 1
t=5 [st=4]   -HOST_RESOLVER_IMPL_PROC_TASK
              --> address_list = ["10.****.17:0"]
t=5 [st=4] -HOST_RESOLVER_IMPL_JOB


471: HTTP_STREAM_JOB
https://devapps***:7004/
Start Time: 2016-10-10 19:14:25.733

t=2 [st=0] +HTTP_STREAM_JOB  [dt=0]
            --> alternative_service = "Uninitialized :0"
            --> original_url = "https://devapps***:7004/"
            --> priority = "HIGHEST"
            --> url = "https://devapps***:7004/"
t=2 [st=0]   +PROXY_SERVICE  [dt=0]
t=2 [st=0]      PROXY_SERVICE_RESOLVED_PROXY_LIST
                --> pac_string = "DIRECT"
t=2 [st=0]   -PROXY_SERVICE
t=2 [st=0]   +HOST_RESOLVER_IMPL_REQUEST  [dt=0]
              --> address_family = 0
              --> allow_cached_response = true
              --> host = "devapps***:7004"
              --> is_speculative = false
t=2 [st=0]      HOST_RESOLVER_IMPL_IPV6_REACHABILITY_CHECK
                --> cached = true
                --> ipv6_available = false
t=2 [st=0]   -HOST_RESOLVER_IMPL_REQUEST
              --> net_error = -804 (ERR_DNS_CACHE_MISS)
t=2 [st=0]    SOCKET_POOL_CONNECTING_N_SOCKETS  [dt=0]
              --> num_sockets = 2
t=2 [st=0] -HTTP_STREAM_JOB


472: CONNECT_JOB
ssl/devapps***:7004
Start Time: 2016-10-10 19:14:25.733

t=  2 [st=  0] +SOCKET_POOL_CONNECT_JOB  [dt=254]
                --> group_name = "ssl/devapps***:7004"
t=  2 [st=  0]   +SOCKET_POOL_CONNECT_JOB_CONNECT  [dt=254]
t=  2 [st=  0]      TCP_CLIENT_SOCKET_POOL_REQUESTED_SOCKET
                    --> host_and_port = "devapps***:7004"
t=  2 [st=  0]     +SOCKET_POOL  [dt=251]
t=253 [st=251]        SOCKET_POOL_BOUND_TO_CONNECT_JOB
                      --> source_dependency = 497 (CONNECT_JOB)
t=253 [st=251]        SOCKET_POOL_BOUND_TO_SOCKET
                      --> source_dependency = 498 (SOCKET)
t=253 [st=251]     -SOCKET_POOL
t=256 [st=254]   -SOCKET_POOL_CONNECT_JOB_CONNECT
                  --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
t=256 [st=254] -SOCKET_POOL_CONNECT_JOB




473: CONNECT_JOB
ssl/devapps***:7004
Start Time: 2016-10-10 19:14:25.733

t=2 [st=0] +SOCKET_POOL_CONNECT_JOB  [dt=7]
            --> group_name = "ssl/devapps***:7004"
t=2 [st=0]   +SOCKET_POOL_CONNECT_JOB_CONNECT  [dt=7]
t=2 [st=0]     +HOST_RESOLVER_IMPL_REQUEST  [dt=3]
                --> address_family = 0
                --> allow_cached_response = true
                --> host = "devapps***:7004"
                --> is_speculative = false
t=2 [st=0]        HOST_RESOLVER_IMPL_IPV6_REACHABILITY_CHECK
                  --> cached = true
                  --> ipv6_available = false
t=2 [st=0]        HOST_RESOLVER_IMPL_JOB_ATTACH
                  --> source_dependency = 470 (HOST_RESOLVER_IMPL_JOB)
t=5 [st=3]     -HOST_RESOLVER_IMPL_REQUEST
t=9 [st=7]      CONNECT_JOB_SET_SOCKET
                --> source_dependency = 477 (SOCKET)
t=9 [st=7]   -SOCKET_POOL_CONNECT_JOB_CONNECT
t=9 [st=7] -SOCKET_POOL_CONNECT_JOB


474: URL_REQUEST
https://devapps***:7004/console-ims
Start Time: 2016-10-10 19:14:25.734

t= 3 [st= 0] +REQUEST_ALIVE  [dt=24]
t= 3 [st= 0]    URL_REQUEST_DELEGATE  [dt=0]
t= 3 [st= 0]    URL_REQUEST_START_JOB  [dt=0]
                --> load_flags = 659713 (BYPASS_DATA_REDUCTION_PROXY | MAIN_FRAME | MAYBE_USER_GESTURE | VALIDATE_CACHE | VERIFY_EV_CERT)
                --> method = "GET"
                --> priority = "HIGHEST"
                --> url = "https://devapps***:7004/console-ims"
t= 3 [st= 0]   +URL_REQUEST_START_JOB  [dt=23]
                --> load_flags = 659713 (BYPASS_DATA_REDUCTION_PROXY | MAIN_FRAME | MAYBE_USER_GESTURE | VALIDATE_CACHE | VERIFY_EV_CERT)
                --> method = "GET"
                --> priority = "HIGHEST"
                --> url = "https://devapps***:7004/console-ims"
t= 4 [st= 1]      URL_REQUEST_DELEGATE  [dt=0]
t= 4 [st= 1]      HTTP_CACHE_GET_BACKEND  [dt=0]
t= 4 [st= 1]      HTTP_CACHE_OPEN_ENTRY  [dt=3]
                  --> net_error = -2 (ERR_FAILED)
t= 7 [st= 4]      HTTP_CACHE_CREATE_ENTRY  [dt=1]
t= 8 [st= 5]      HTTP_CACHE_ADD_TO_ENTRY  [dt=0]
t= 8 [st= 5]      URL_REQUEST_DELEGATE  [dt=0]
t= 8 [st= 5]     +HTTP_STREAM_REQUEST  [dt=4]
t=12 [st= 9]        SSL_VERSION_FALLBACK
                    --> TLS 1.2 ==> TLS 1.1
                    --> host_and_port = "devapps***:7004"
                    --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
                    --> ssl_failure_state = 2
t=12 [st= 9]     -HTTP_STREAM_REQUEST
t=12 [st= 9]     +HTTP_STREAM_REQUEST  [dt=6]
t=18 [st=15]        SSL_VERSION_FALLBACK
                    --> TLS 1.1 ==> TLS 1.0
                    --> host_and_port = "devapps***:7004"
                    --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
                    --> ssl_failure_state = 2
t=18 [st=15]     -HTTP_STREAM_REQUEST
t=18 [st=15]      HTTP_STREAM_REQUEST  [dt=8]
t=26 [st=23]   -URL_REQUEST_START_JOB
                --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
t=26 [st=23]    URL_REQUEST_DELEGATE  [dt=1]
t=27 [st=24] -REQUEST_ALIVE
              --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)



476: SOCKET
ssl/devapps***:7004
Start Time: 2016-10-10 19:14:25.736

t=   5 [st=   0] +SOCKET_ALIVE  [dt=5162+]
                  --> source_dependency = 469 (CONNECT_JOB)
t=   5 [st=   0]   +TCP_CONNECT  [dt=3006]
                    --> address_list = ["10.****.17:7004"]
t=   5 [st=   0]      TCP_CONNECT_ATTEMPT  [dt=3006]
                      --> address = "10.****.17:7004"
t=3011 [st=3006]   -TCP_CONNECT
                    --> source_address = "10.****.100:60146"
t=5167 [st=5162] 


477: SOCKET
ssl/devapps***:7004
Start Time: 2016-10-10 19:14:25.736

t= 5 [st=0] +SOCKET_ALIVE  [dt=7]
             --> source_dependency = 473 (CONNECT_JOB)
t= 5 [st=0]   +TCP_CONNECT  [dt=4]
               --> address_list = ["10.****.17:7004"]
t= 5 [st=0]      TCP_CONNECT_ATTEMPT  [dt=4]
                 --> address = "10.****.17:7004"
t= 9 [st=4]   -TCP_CONNECT
               --> source_address = "10.****.100:60147"
t= 9 [st=4]   +SOCKET_IN_USE  [dt=3]
               --> source_dependency = 468 (CONNECT_JOB)
t= 9 [st=4]     +SSL_CONNECT  [dt=2]
t= 9 [st=4]        SOCKET_BYTES_SENT
                   --> byte_count = 219
t=11 [st=6]        SOCKET_BYTES_RECEIVED
                   --> byte_count = 7
t=11 [st=6]        SSL_HANDSHAKE_ERROR
                   --> error_lib = 16
                   --> error_reason = 1047
                   --> file = "c:\\b\\build\\slave\\win\\build\\src\\third_party\\boringssl\\src\\ssl\\s3_pkt.c"
                   --> line = 985
                   --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
                   --> ssl_error = 1
t=11 [st=6]     -SSL_CONNECT
                 --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
t=11 [st=6]      SOCKET_CLOSED
t=12 [st=7]   -SOCKET_IN_USE
t=12 [st=7] -SOCKET_ALIVE


479: HTTP_STREAM_JOB
https://devapps***:7004/
Start Time: 2016-10-10 19:14:25.739

t= 8 [st=0] +HTTP_STREAM_JOB  [dt=4]
             --> alternative_service = "Uninitialized :0"
             --> original_url = "https://devapps***:7004/"
             --> priority = "HIGHEST"
             --> url = "https://devapps***:7004/"
t= 8 [st=0]   +PROXY_SERVICE  [dt=0]
t= 8 [st=0]      PROXY_SERVICE_RESOLVED_PROXY_LIST
                 --> pac_string = "DIRECT"
t= 8 [st=0]   -PROXY_SERVICE
t= 8 [st=0]   +HOST_RESOLVER_IMPL_REQUEST  [dt=0]
               --> address_family = 0
               --> allow_cached_response = true
               --> host = "devapps***:7004"
               --> is_speculative = false
t= 8 [st=0]      HOST_RESOLVER_IMPL_IPV6_REACHABILITY_CHECK
                 --> cached = true
                 --> ipv6_available = false
t= 8 [st=0]      HOST_RESOLVER_IMPL_CACHE_HIT
t= 8 [st=0]   -HOST_RESOLVER_IMPL_REQUEST
t= 8 [st=0]   +SOCKET_POOL  [dt=4]
t=11 [st=3]      SOCKET_POOL_BOUND_TO_CONNECT_JOB
                 --> source_dependency = 468 (CONNECT_JOB)
t=12 [st=4]   -SOCKET_POOL
               --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
t=12 [st=4] -HTTP_STREAM_JOB


481: CONNECT_JOB
ssl(max:3.2)/devapps***:7004
Start Time: 2016-10-10 19:14:25.743

t=12 [st=0] +SOCKET_POOL_CONNECT_JOB  [dt=6]
             --> group_name = "ssl(max:3.2)/devapps***:7004"
t=12 [st=0]   +SOCKET_POOL_CONNECT_JOB_CONNECT  [dt=6]
t=12 [st=0]      TCP_CLIENT_SOCKET_POOL_REQUESTED_SOCKET
                 --> host_and_port = "devapps***:7004"
t=12 [st=0]     +SOCKET_POOL  [dt=3]
t=15 [st=3]        SOCKET_POOL_BOUND_TO_CONNECT_JOB
                   --> source_dependency = 482 (CONNECT_JOB)
t=15 [st=3]        SOCKET_POOL_BOUND_TO_SOCKET
                   --> source_dependency = 484 (SOCKET)
t=15 [st=3]     -SOCKET_POOL
t=18 [st=6]   -SOCKET_POOL_CONNECT_JOB_CONNECT
               --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
t=18 [st=6] -SOCKET_POOL_CONNECT_JOB


484: SOCKET
ssl(max:3.2)/devapps***:7004
Start Time: 2016-10-10 19:14:25.744

t=13 [st=0] +SOCKET_ALIVE  [dt=5]
             --> source_dependency = 482 (CONNECT_JOB)
t=13 [st=0]   +TCP_CONNECT  [dt=2]
               --> address_list = ["10.****.17:7004"]
t=13 [st=0]      TCP_CONNECT_ATTEMPT  [dt=2]
                 --> address = "10.****.17:7004"
t=15 [st=2]   -TCP_CONNECT
               --> source_address = "10.****.100:60148"
t=15 [st=2]   +SOCKET_IN_USE  [dt=3]
               --> source_dependency = 481 (CONNECT_JOB)
t=15 [st=2]     +SSL_CONNECT  [dt=3]
t=16 [st=3]        SOCKET_BYTES_SENT
                   --> byte_count = 172
t=18 [st=5]        SOCKET_BYTES_RECEIVED
                   --> byte_count = 7
t=18 [st=5]        SSL_HANDSHAKE_ERROR
                   --> error_lib = 16
                   --> error_reason = 1047
                   --> file = "c:\\b\\build\\slave\\win\\build\\src\\third_party\\boringssl\\src\\ssl\\s3_pkt.c"
                   --> line = 985
                   --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
                   --> ssl_error = 1
t=18 [st=5]     -SSL_CONNECT
                 --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
t=18 [st=5]      SOCKET_CLOSED
t=18 [st=5]   -SOCKET_IN_USE
t=18 [st=5] -SOCKET_ALIVE
If it goes all the way back to Chrome 44, then that's no recent change. It is almost certainly a bug in their stack somewhere. I think you'll need to reach out to the vendor. Tell them they're welcome to contact me at davidben@chromium.org if they need help on the Chrome side. But without an instance we can access, I don't think there's anything we can do.

(I see from your screenshot that the server prefers RC4 which is poor, but we hadn't removed RC4 in Chrome 44, so that's not the cause.)

Comment 9 by eroman@chromium.org, Oct 10 2016

Regarding net-internals dump not working, I would like to get more data from you.

Once it gets stuck at "Preparing data...", can you open the Dev Tools (Ctrl + Shift + J) and copy paste any of the Javascript errors that it shows?

(I expect there is a javascript error happening when preparing the log data which is why it gets stuck on that screen).

Thanks!

Comment 10 by bau...@gmail.com, Oct 11 2016

for net-internal, I found how to reproduce (Version 53.0.2785.116). This day it's work, just because I not stop capture.

1/Reset capture
2/make capture and when finish. I STOP
3/ export not work when capture is stopped.
more error appear but only before make export; when make export no new error.

But can't reproduce with chrome54.0.2840.50 beta-m (64-bit) (another computer)

chrome311.png
7.2 KB View Download
That does sound like  issue 616382  (Which was fixed in M54).  Strangely, I can't reproduce it on Windows stable (53.0.2785.143 - I don't think the fix was merged, though, so using a slightly more recent stable shouldn't have fixed it).

Comment 12 by bau...@gmail.com, Oct 11 2016

I can reproduce it with Version 53.0.2785.143 m (64-bit) on Win10 when open net-internal
VM439:1 Uncaught TypeError: Cannot read property 'receive' of null(anonymous function) @ VM439:1

and when stop
 index.js:984 Uncaught TypeError: view.isVisible is not a function

Comment 13 by bau...@gmail.com, Oct 11 2016

with Version 54.0.2840.50 beta-m (64-bit) when stop capture, it go automaticaly to export

Comment 14 by bau...@gmail.com, Oct 14 2016

reproduce ERR_SSL_PROTOCOL_ERROR with https://ad.doubleclick.net/ddm/clk/311153396;138856988;x  with chrome 54.0.2840.59 beta-m (64-bit)

link is posted by google on twitter.




ad.doubleclick.net.png
44.3 KB View Download
link from google.png
112 KB View Download
net-internals-log.json
106 KB View Download
That appears to be a different issue. We're getting what looks like garbage from the peer.

Are you running a firewall or antivirus of some sort? It appears to be misbehaving. You should reach out to the vendor.
Labels: TE-NeedsTriageHelp
Project Member

Comment 17 by sheriffbot@chromium.org, Oct 24 2016

Labels: -Needs-Feedback Needs-Review
Owner: davidben@chromium.org
Thank you for providing more feedback. Adding requester "davidben@chromium.org" for another review and adding "Needs-Review" label for tracking.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Labels: -Needs-Review Needs-Feedback
(Still waiting on feedback.)

Comment 19 by bau...@gmail.com, Oct 29 2016

Hi, I confirm for comment 14, it's different issue (on my personal computer). it's linked to AVAST AV. thanks
Project Member

Comment 20 by sheriffbot@chromium.org, Nov 5 2016

Labels: -Needs-Feedback Needs-Review
Thank you for providing more feedback. Adding "Needs-Review" label for tracking.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Status: WontFix (was: Unconfirmed)
Alright. It sounds like we have two issues then, one is a bug in some RSA product. Per reporter's mail to me directly, we can close that ticket and they are reaching out to the vendor.

The second sounds like some issue with AVAST AV which is probably a bug in their product. Regardless, if there's anything to investigate on our end, it should be in a separate ticket. But it's almost certainly the AV vendor's bug.

Sign in to add a comment