[Bug 25646] New: SSL connection not work(NETCON_secure_connect SSL_connect failed: 12056)

http://bugs.winehq.org/show_bug.cgi?id=25646

Summary: SSL connection not work(NETCON_secure_connect
                    SSL_connect failed: 12056)
           Product: Wine
           Version: 1.3.10
          Platform: x86-64
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: -unknown
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]

I experienced minor problem with running LibertyKeeper on Gentoo amd64
2.6.36-kernel 
app-emulation/wine-1.3.10 USE="X alsa cups dbus fontconfig gecko gnutls jpeg
lcms ldap mp3 ncurses openal opengl oss perl png samba ssl threads truetype
win32 win64 xcomposite xinerama xml" 
Actually program launch, but I can't connect e.g. login to server. I know
exactly what cause a trouble: 
err:wininet:NETCON_secure_connect SSL_connect failed: 12056 
Anyway I was successfully running this app on previous wine releases, less than
1.3.1, think it was before 64bit support implemented.

[Bug 25646] SSL connection not work(NETCON_secure_connect SSL_connect failed: 12056)

http://bugs.winehq.org/show_bug.cgi?id=25646

--- Comment #1 from Austin English  2010-12-29 19:54:07 CST ---
If it used to work, please run a regression test:
http://wiki.winehq.org/RegressionTesting

[Bug 25646] SSL connection not work(NETCON_secure_connect SSL_connect failed: 12056)

http://bugs.winehq.org/show_bug.cgi?id=25646

--- Comment #2 from Andrey  2010-12-31 04:56:36 CST ---
(In reply to comment #1)
> If it used to work, please run a regression test:
> http://wiki.winehq.org/RegressionTesting

I'll, but i'm very limited with Internet traffic right now. But I have 1.3.10
Wine source code on Gentoo, so i'm looking how to use it to test regression.

[Bug 25646] SSL connection not work(NETCON_secure_connect SSL_connect failed: 12056)

http://bugs.winehq.org/show_bug.cgi?id=25646

Wylda  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |download, regression
                URL|                            |http://www.libertykeeper.ne
                   |                            |t.ua/
                 CC|                            |[e-mail]

--- Comment #3 from Wylda  2010-12-31 08:21:31 CST ---

Hi, i wanted to make that test for you, but it seems that some account is
needed. Or does some testing account exists already? As the website i found is
in Russian i don't know what this program is about.

[Bug 25646] LibertyKeeper: SSL connection does not work

http://bugs.winehq.org/show_bug.cgi?id=25646

Wylda  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|SSL connection not          |LibertyKeeper: SSL
                   |work(NETCON_secure_connect  |connection does not work
                   |SSL_connect failed: 12056)  |

[Bug 25646] LibertyKeeper: SSL connection does not work

http://bugs.winehq.org/show_bug.cgi?id=25646

--- Comment #4 from Andrey  2011-02-22 14:21:53 CST ---
(In reply to comment #3)
> Hi, i wanted to make that test for you, but it seems that some account is
> needed. Or does some testing account exists already? As the website i found is
> in Russian i don't know what this program is about.

Hello Wylda!
 Sorry for not replying so long, really i was unable to rich you, because i'm
still at work far from shore, but at last i got chance...
 Thanks for tring to help me, let I explain what needed to test Liberty Keeper.
This program used to check money balance in Perfect Money and other payment
systems it likes Webmoney Keeper maybe you know it.
 Yes, you right, you need have an accounts in Perfect Money
http://www.perfectmoney.com/  and Liberty Reserve
https://www.libertyreserve.com/en/  payment systems it is easy to make just you
can create any fake name accounts in sake of test. Then you need enable an API
interface(inside accounts on website) for this accounts in order to be able to
connect to your account via Liberty Keeper (If you will get any difficulties
with that, I will explain you how in details).
And regarding Liberty Keeper application: it has english interface so i cut
direct download link for you
-http://www.libertykeeper.net.ua/LibertyKeeper_Install.exe.
I will provide you with test accounts if in case some reason you can't create
your own.

[Bug 25646] LibertyKeeper: SSL connection does not work

http://bugs.winehq.org/show_bug.cgi?id=25646

Dan Kegel  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #5 from Dan Kegel  2011-02-22 14:39:03 CST ---
12056 is ERROR_INTERNET_SEC_CERT_NO_REV, fwiw

[Bug 25646] LibertyKeeper: SSL connection does not work

http://bugs.winehq.org/show_bug.cgi?id=25646

--- Comment #6 from Juan Lang  2011-02-22 17:45:34 CST ---
Please attach a +crypt,+chain,+cryptnet log.

[Bug 25646] LibertyKeeper: SSL connection does not work

http://bugs.winehq.org/show_bug.cgi?id=25646

--- Comment #7 from Andrey  2011-03-09 22:11:20 CST ---

These lines repeated all time:
http://pastebin.com/ZXwrR4ST
log of:
+crypt,+chain,+cryptnet

[Bug 25646] LibertyKeeper: SSL connection does not work

http://bugs.winehq.org/show_bug.cgi?id=25646

--- Comment #8 from Andrey  2011-03-09 23:42:28 CST ---
I have created test account in Liberty Reserve
 Anyone can use it for test, its data:
ACC Number: U2695902      (it have to be entered in LibertyKeeper)

Name of API: Roland-acc   (it have to be entered in LibertyKeeper)
Security.word: roland123  (it have to be entered in LibertyKeeper)

When program logged correctly, you should see its state like here:
http://s61.radikal.ru/i174/1103/f6/bad8f5241909.jpg

p.s. I did this screen inside VirtulBox running Windows2003Server

[Bug 25646] LibertyKeeper: SSL connection does not work

http://bugs.winehq.org/show_bug.cgi?id=25646

--- Comment #9 from Juan Lang  2011-03-09 23:58:41 CST ---
Please attach here in the future rather than using pastebin.  From your log:

trace:cryptnet:CertDllVerifyRevocation (00000001, 1, 1, 0x33aa3c, 00000001,
0x33a9f0, 0x33aa20)
trace:crypt:CertFindExtension "2.5.29.31" 5 0x1855a54
trace:crypt:CryptDecodeObjectEx (0x00000001, #0023, 0x1855ae4, 51, 0x00008000,
(nil), 0x33a82c, 0x33a828)
trace:crypt:CryptDecodeObjectEx returning 1
trace:crypt:CryptDecodeObjectEx (0x00000001, #0023, 0x1855ae4, 51, 0x00008000,
(nil), 0x33a82c, 0x33a828)

In other words, cert_verify_revocation is looking for, and finds, a
CRL_DIST_POINTS extension (2.5.29.31).  Continuing:

trace:cryptnet:CryptRetrieveObjectByUrlW
(L"http://crl.geotrust.com/crls/secureca.crl", #0002, 00000000, 0, 0x33a8dc,
(nil), (nil), (nil), (nil))

Okay, so it downloads a CRL, which it'll then attempt to validate with
verify_cert_revocation_with_crl.  Then:

trace:cryptnet:CertDllVerifyRevocation returning 0 (80092012)

The only way verify_cert_revocation_with_crl will return 80092012
(CRYPT_E_NO_REVOCATION_CHECK) is if the CRL isn't time valid.  Unfortunately,
we don't know what time it's checking for, because your log is truncated. 
Please attach the entire thing here, compressed if necessary.

[Bug 25646] LibertyKeeper: SSL connection does not work

http://bugs.winehq.org/show_bug.cgi?id=25646

--- Comment #10 from Juan Lang  2011-03-11 11:28:32 CST ---
I attempted to log in with the test account you provided, and I see in the
AccountBalance area:

LRUSD   0.00    2011-11-03 17:25:06
LREUR   0.00    2011-11-03 17:25:06

It looks to me as though it's working correctly.  I tried to compare with the
image you provided, but the link isn't working.  Please attach the image here
instead.

One last thing:  is the time on your system correct?

[Bug 25646] LibertyKeeper: SSL connection does not work

http://bugs.winehq.org/show_bug.cgi?id=25646

--- Comment #11 from Juan Lang  2011-03-11 18:30:27 CST ---
Update: I sent some patches that I hope will help.  Could you try them and see?
http://www.winehq.org/pipermail/wine-patches/2011-March/099827.html
http://www.winehq.org/pipermail/wine-patches/2011-March/099828.html
http://www.winehq.org/pipermail/wine-patches/2011-March/099829.html

[Bug 25646] LibertyKeeper: SSL connection does not work

http://bugs.winehq.org/show_bug.cgi?id=25646

Andrey  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|                            |FIXED

--- Comment #12 from Andrey  2011-03-13 22:43:34 CDT ---
Juan Lang,
Thanks for patches, but actually they are not needed anymore. Yes, it works now
as you wrote, i mean login via API. So, that means it fixed with some patches,
and regression gone, alas not known where exactly, i'm running wine 1.3.14,
tested Perfect Money and Liberty Reserve API logins via Liberty Keeper. Thanks
everyone for help, marked as RESOLVED.

[Bug 25646] LibertyKeeper: SSL connection does not work

http://bugs.winehq.org/show_bug.cgi?id=25646

Alexandre Julliard  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #13 from Alexandre Julliard  2011-03-18 14:39:54 CDT ---
Closing bugs fixed in 1.3.16.