[www.kde.org] [Bug 362550] Community, Forum, Userbase, and Techbase timeout on IPv6

Denis Revin via KDE Bugzilla bugzilla_noreply at kde.org
Sat Aug 27 15:59:03 UTC 2016


https://bugs.kde.org/show_bug.cgi?id=362550

Denis Revin <denis.revin at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |denis.revin at gmail.com

--- Comment #2 from Denis Revin <denis.revin at gmail.com> ---
Hello, dear admins. I have same issue as Sean, and I don't think that its
provider problem. Let me explain.

When you trying access to community.kde.org DNS returns 2a02:e980:e::da and
that's wrong:
----------------------
[dut at void ~]$ openssl s_client -connect 2a02:e980:e::da:443
CONNECTED(00000003)
write:errno=104
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 320 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
---
-----------------------------


After some debugging with dns and ssl tools i've found that community.kde.org
must return 2a02:e980:15::da ('e' must be changed to '15'). After that all
works fine.

Same issue with forum.kde.org and so on:
[dut at void ~]$ wget https://forum.kde.org/
--2016-08-27 19:53:35--  https://forum.kde.org/
Resolving forum.kde.org (forum.kde.org)... 2a02:e980:e::22, 192.230.77.34
Connecting to forum.kde.org (forum.kde.org)|2a02:e980:e::22|:443... connected.
Unable to establish SSL connection.

[dut at void ~]$ wget --header="Host: forum.kde.org" https://[2a02:e980:e::22]/
--2016-08-27 19:55:38--  https://[2a02:e980:e::22]/
Connecting to [2a02:e980:e::22]:443... connected.
Unable to establish SSL connection.


[dut at void ~]$ wget --no-check-certificate --header="Host: forum.kde.org"
https://[2a02:e980:15::22]/
--2016-08-27 19:56:08--  https://[2a02:e980:15::22]/
Connecting to [2a02:e980:15::22]:443... connected.
    WARNING: certificate common name ‘incapsula.com’ doesn't match requested
host name ‘2a02:e980:15::22’.
HTTP request sent, awaiting response... 200 OK
Cookie coming from 2a02:e980:15::22 attempted to set domain to forum.kde.org
Cookie coming from 2a02:e980:15::22 attempted to set domain to forum.kde.org
Cookie coming from 2a02:e980:15::22 attempted to set domain to forum.kde.org
Cookie coming from 2a02:e980:15::22 attempted to set domain to kde.org
Cookie coming from 2a02:e980:15::22 attempted to set domain to kde.org
Length: unspecified [text/html]
Saving to: ‘index.html’

index.html              [   <=>              ]  58.04K   122KB/s    in 0.5s    

2016-08-27 19:56:11 (122 KB/s) - ‘index.html’ saved [59438]

Can you, please, try to check it? Thanks.

Sean, for temporary workaround you can just add forum.kde.org community.kde.org
and so on to /etc/hosts with appropriate ipv6 addresses.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the kde-www mailing list