Problem in Erlang 21.0 and 21.1. Is this already known?

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Problem in Erlang 21.0 and 21.1. Is this already known?

Xavier Robledo
Hello I've run into a problem with this code:
inets:start(), ssl:start(), httpc:request(post,
{"https://sandbox.itunes.apple.com/verifyReceipt", [],
"application/json", []}, [], []).

It returns the following error in the terminal:

=INFO REPORT==== 3-Oct-2018::16:26:14.278110 ===

TLS client: In state hello received SERVER ALERT: Fatal - Handshake Failure


{error,{failed_connect,[{to_address,{"sandbox.itunes.apple.com",

                                     443}},

                        {inet,[inet],{tls_alert,"handshake failure"}}]}}

Does anyone know if this is a known issue?
_______________________________________________
erlang-questions mailing list
[hidden email]
http://erlang.org/mailman/listinfo/erlang-questions
Reply | Threaded
Open this post in threaded view
|

Re: Problem in Erlang 21.0 and 21.1. Is this already known?

Antoine Koener

May be some hints:

https://www.ssllabs.com/ssltest/analyze.html?d=sandbox.itunes.apple.com

reveals interesting thing inside the "handshake simulations" part of the report:


Apple ATS 9 / iOS 9  RServer sent fatal alert: handshake_failure




And looking at various warning from the same report I would say that you are dealing with some "not so" rfc compliant business :-)



On Thu, Oct 4, 2018 at 5:42 AM Xavier Robledo <[hidden email]> wrote:
Hello I've run into a problem with this code:
inets:start(), ssl:start(), httpc:request(post,
{"https://sandbox.itunes.apple.com/verifyReceipt", [],
"application/json", []}, [], []).

It returns the following error in the terminal:

=INFO REPORT==== 3-Oct-2018::16:26:14.278110 ===

TLS client: In state hello received SERVER ALERT: Fatal - Handshake Failure


{error,{failed_connect,[{to_address,{"sandbox.itunes.apple.com",

                                     443}},

                        {inet,[inet],{tls_alert,"handshake failure"}}]}}

Does anyone know if this is a known issue?
_______________________________________________
erlang-questions mailing list
[hidden email]
http://erlang.org/mailman/listinfo/erlang-questions

_______________________________________________
erlang-questions mailing list
[hidden email]
http://erlang.org/mailman/listinfo/erlang-questions
Reply | Threaded
Open this post in threaded view
|

Re: Problem in Erlang 21.0 and 21.1. Is this already known?

Peter Dimitrov
In reply to this post by Xavier Robledo

Hi,


It looks like itunes would like to negotiate a weaker cipher suite using RSA key exchange.

Those ciphers are not supported by default but you can still configure ssl to support them:


All = ssl:cipher_suites(all, 'tlsv1.2').

Opts = [{ciphers, All}]. 

httpc:request(post,{"https://sandbox.itunes.apple.com/verifyReceipt", [],"application/json", []}, [{ssl,Opts}], []).


BR/Peter

 

-----Original Message-----
From:
[hidden email] <[hidden email]> On Behalf Of Xavier Robledo
Sent: den 3 oktober 2018 23:35
To: [hidden email]
Subject: [erlang-questions] Problem in Erlang 21.0 and 21.1. Is this already known?

 

Hello I've run into a problem with this code:

inets:start(), ssl:start(), httpc:request(post, {"https://sandbox.itunes.apple.com/verifyReceipt", [], "application/json", []}, [], []).

 

It returns the following error in the terminal:

 

=INFO REPORT==== 3-Oct-2018::16:26:14.278110 ===

 

TLS client: In state hello received SERVER ALERT: Fatal - Handshake Failure

 

 

{error,{failed_connect,[{to_address,{"sandbox.itunes.apple.com",

 

                                     443}},

 

                        {inet,[inet],{tls_alert,"handshake failure"}}]}}

 

Does anyone know if this is a known issue?

_______________________________________________

erlang-questions mailing list

[hidden email]

http://erlang.org/mailman/listinfo/erlang-questions


_______________________________________________
erlang-questions mailing list
[hidden email]
http://erlang.org/mailman/listinfo/erlang-questions