[Bug 302793] New: TLS/SSL error when fetching https://blogs.kde.org over IPv6

[Timothy Baldwin]

https://bugs.kde.org/show_bug.cgi?id=302793

            Bug ID: 302793
          Severity: major
               URL: https://blogs.kde.org
           Version: unspecified
          Priority: NOR
          Assignee: kde-www at kde.org
           Summary: TLS/SSL error when fetching https://blogs.kde.org over
                    IPv6
    Classification: Unclassified
                OS: All
          Reporter: T.E.Baldwin99 at members.leeds.ac.uk
          Hardware: Other
            Status: UNCONFIRMED
         Component: general
           Product: www.kde.org

A TLS/SSL error when fetching https://blogs.kde.org over IPv6.

HTTPS over IPv6 broken.
HTTPS over IPv4 works.
HTTP over IPv6 works.
HTTP over IPv4 works.


Reproducible: Always

Steps to Reproduce:
1. Ensure computer has IPv6 Internet access which is preferred over IPv4.
2. Open https://blogs.kde.org in any web browser.

Actual Results:  
A TLS/SSL error message appears:
In Iceweasel 14: 

SSL received a record that exceeded the maximum permissible length.
(Error code: ssl_error_rx_record_too_long)

Expected Results:  
The web page should load.

Reproducable in every browser I have tried:
Wget on Debian Squeeze
Iceweasel 14 on Debian Squeeze
Konqueror on Debian Squeeze
Wget on Debian Wheezy
Iceweasel 14 on Debian Wheezy
Firefox 12 on Windows XP
Internet Explorer 8 on Windows XP

The problem is specific to HTTPS over IPv6.

And via two different tunnel brokers, Hurricane Electric and Gogo6.
$ sudo traceroute -6 -T -p 80 blogs.kde.org
traceroute to blogs.kde.org (2a01:348:6:42f::2), 30 hops max, 80 byte packets
 1  fd71:5639:d180:1::a (fd71:5639:d180:1::a)  0.637 ms  1.360 ms  1.578 ms
 2  timbaldwin-1.tunnel.tserv5.lon1.ipv6.he.net (2001:470:1f08:8f6::1)  37.304
ms  43.197 ms  49.416 ms
 3  gige-g4-8.core1.lon1.he.net (2001:470:0:67::1)  49.928 ms  51.189 ms 
53.265 ms
 4  xe-0-0-0-0.rt0.thn.uk.goscomb.net (2001:7f8:4::999e:1)  53.767 ms  54.398
ms  54.941 ms
 5  xe-0-0-0.rt0.the.uk.goscomb.net (2a01:348::27:0:1)  57.019 ms  59.050 ms 
62.949 ms
 6  ae0-700.rt0.sov.uk.goscomb.net (2a01:348::32:0:1)  64.902 ms  41.351 ms 
42.994 ms
 7  xe-0-0-3-0.rt0.sov.uk.goscomb.net (2a01:348::50:1:1)  35.011 ms  25.310 ms 
31.243 ms
 8  xe-0-1-1-0.cs1.gs2.uk.goscomb.net (2a01:348::41:0:1)  31.704 ms  27.524 ms 
30.209 ms
 9  xe-0-1-1.cs0.gs2.uk.goscomb.net (2a01:348::40:0:1)  33.492 ms  38.789 ms 
41.090 ms
10  xe-0-1-0.cs0.the.uk.goscomb.net (2a01:348::24:0:1)  44.455 ms  46.511 ms 
47.773 ms
11  xe-0-1-0.cs0.thw.uk.goscomb.net (2a01:348::36:0:1)  51.533 ms  53.755 ms 
55.033 ms
12  gblon02.sixxs.net (2a01:348:0:4:0:3:1:1)  58.863 ms  60.558 ms  62.785 ms
13  gw-1072.lon-02.gb.sixxs.net (2a01:348:6:42f::1)  66.052 ms  73.635 ms 
50.351 ms
14  cl-1072.lon-02.gb.sixxs.net (2a01:348:6:42f::2)  49.626 ms  47.731 ms 
45.502 ms

$ sudo traceroute -6 -T -p 80 blogs.kde.org
traceroute to blogs.kde.org (2a01:348:6:42f::2), 30 hops max, 80 byte packets
 1  2001:5c0:1400:a::178 (2001:5c0:1400:a::178)  39.196 ms  41.030 ms  42.994
ms
 2  ve8.ipv6.colo-rx4.eweka.nl (2001:4de0:1000:a22::1)  46.935 ms  48.881 ms 
52.876 ms
 3  9-1.ipv6.r2.am.hwng.net (2001:4de0:a::1)  70.631 ms  70.707 ms  70.760 ms
 4  5-3.ipv6.r1.am.hwng.net (2001:4de0:1000:1::1)  67.345 ms  66.854 ms 
106.610 ms
 5  5-1.ipv6.r1.lo.hwng.net (2001:4de0:1000:43::2)  78.594 ms  80.673 ms 
82.478 ms
 6  xe-0-0-0-0.rt0.thn.uk.goscomb.net (2001:7f8:4::999e:1)  86.428 ms  37.225
ms  39.208 ms
 7  xe-0-0-0.rt0.the.uk.goscomb.net (2a01:348::27:0:1)  43.080 ms  35.600 ms 
39.508 ms
 8  ae0-700.rt0.sov.uk.goscomb.net (2a01:348::32:0:1)  43.600 ms  45.435 ms 
47.418 ms
 9  xe-0-0-3-0.rt0.sov.uk.goscomb.net (2a01:348::50:1:1)  42.904 ms  44.514 ms 
39.699 ms
10  xe-0-1-1-0.cs1.gs2.uk.goscomb.net (2a01:348::41:0:1)  41.446 ms  45.865 ms 
47.307 ms
11  xe-0-1-1.cs0.gs2.uk.goscomb.net (2a01:348::40:0:1)  52.416 ms  37.387 ms 
41.329 ms
12  xe-0-1-0.cs0.the.uk.goscomb.net (2a01:348::24:0:1)  43.184 ms  39.669 ms 
40.099 ms
13  xe-0-1-0.cs0.thw.uk.goscomb.net (2a01:348::36:0:1)  45.431 ms  37.696 ms 
41.628 ms
14  gblon02.sixxs.net (2a01:348:0:4:0:3:1:1)  43.589 ms  37.798 ms  38.223 ms
15  gw-1072.lon-02.gb.sixxs.net (2a01:348:6:42f::1)  41.513 ms  39.196 ms 
41.079 ms
16  cl-1072.lon-02.gb.sixxs.net (2a01:348:6:42f::2)  44.765 ms  39.385 ms 
41.289 ms

-- 
You are receiving this mail because:
You are the assignee for the bug.