How to deal with "tsneterr: (60) SSl certificate problem..."

Anything beyond the basics in using the LiveCode language. Share your handlers, functions and magic here.

Moderators: Klaus, FourthWorld, heatherlaine, robinmiller, kevinmiller

Post Reply
simon.schvartzman
Posts: 318
Joined: Tue Jul 29, 2014 12:52 am
Location: Brazil

How to deal with "tsneterr: (60) SSl certificate problem..."

Post by simon.schvartzman » Wed Apr 24, 2019 12:59 pm

Just on some wifi networks users are getting the error below
tsneterr.jpeg
when submitting a Dropbox upload transaction.

tsNetSetTimeouts is set as

Code: Select all

tsNetSetTimeouts 30, 0, 300000, 60000, 5, 1000
Same user/app when connected to another wifi works OK.

I suspect it has to do with the network configuration which I can't change and therefore I would like to know if there is any work around I could try.

My first approach would be to locally store the file for later upload when no such error is received but before following this path I would like to know if there are other solutions to be considered.

Many thanks...regards
Simon
________________________________________
To ";" or not to ";" that is the question

FourthWorld
VIP Livecode Opensource Backer
VIP Livecode Opensource Backer
Posts: 6959
Joined: Sat Apr 08, 2006 7:05 am
Location: Los Angeles
Contact:

Re: How to deal with "tsneterr: (60) SSl certificate problem..."

Post by FourthWorld » Wed Apr 24, 2019 3:18 pm

Who authorizes the cert?
Richard Gaskin
Community volunteer LiveCode Community Liaison

LiveCode development, training, and consulting services: Fourth World Systems: http://FourthWorld.com
LiveCode User Group on Facebook : http://FaceBook.com/groups/LiveCodeUsers/

simon.schvartzman
Posts: 318
Joined: Tue Jul 29, 2014 12:52 am
Location: Brazil

Re: How to deal with "tsneterr: (60) SSl certificate problem..."

Post by simon.schvartzman » Wed Apr 24, 2019 3:28 pm

Answering to FourthWorld comment:
Who authorizes the cert?
No idea....I'm just using a "plain" dropboxUpload call which works OK on most Wifi networks but one

Code: Select all

  dropboxUpload pAccessToken, pPathFrom, pMode, pAutorename, pMute, tData  
   if the result is not empty then
        answer the result
   end if
Simon
________________________________________
To ";" or not to ";" that is the question

FourthWorld
VIP Livecode Opensource Backer
VIP Livecode Opensource Backer
Posts: 6959
Joined: Sat Apr 08, 2006 7:05 am
Location: Los Angeles
Contact:

Re: How to deal with "tsneterr: (60) SSl certificate problem..."

Post by FourthWorld » Wed Apr 24, 2019 4:45 pm

I haven't looked up that tsNet error number, but the description sounds like it might be related to the authenticating server not fulfilling its function. Cheaper certs may conceivably have underprovisioned authentication servers. Just a hunch.

Does Firefox give any warning when attempting the same URL?
Richard Gaskin
Community volunteer LiveCode Community Liaison

LiveCode development, training, and consulting services: Fourth World Systems: http://FourthWorld.com
LiveCode User Group on Facebook : http://FaceBook.com/groups/LiveCodeUsers/

simon.schvartzman
Posts: 318
Joined: Tue Jul 29, 2014 12:52 am
Location: Brazil

Re: How to deal with "tsneterr: (60) SSl certificate problem..."

Post by simon.schvartzman » Wed Apr 24, 2019 4:55 pm

Hi Richard many thanks for taking your time to help.
Does Firefox give any warning when attempting the same URL?
Not sure I understand your point as there is no URL involved, as I said I'm using just the LC dropbox library.
Simon
________________________________________
To ";" or not to ";" that is the question

FourthWorld
VIP Livecode Opensource Backer
VIP Livecode Opensource Backer
Posts: 6959
Joined: Sat Apr 08, 2006 7:05 am
Location: Los Angeles
Contact:

Re: How to deal with "tsneterr: (60) SSl certificate problem..."

Post by FourthWorld » Wed Apr 24, 2019 5:17 pm

You're right. I was thinking of something else. This is a cert issue, but the details are opaque to us, handled within the external.

I'll see if I can get the author of the external to chime in here.
Richard Gaskin
Community volunteer LiveCode Community Liaison

LiveCode development, training, and consulting services: Fourth World Systems: http://FourthWorld.com
LiveCode User Group on Facebook : http://FaceBook.com/groups/LiveCodeUsers/

charlesBUSd8qF
VIP Livecode Opensource Backer
VIP Livecode Opensource Backer
Posts: 38
Joined: Wed Apr 11, 2012 10:28 pm

Re: How to deal with "tsneterr: (60) SSl certificate problem..."

Post by charlesBUSd8qF » Thu Apr 25, 2019 10:01 am

Hi Simon,

Is this issue something you have only seen on Android devices by any chance?

For most operating systems, tsNet uses the SSL libraries (and SSL certificates) included with the device itself to establish and verify SSL connections. On Android, tsNet uses the OpenSSL library and a pre-defined SSL CA bundle (this is a set of root and intermediate certificates that are used to verify the SSL certificates of servers that you connect to).

That error indicates that the validity of an intermediate SSL certificate that is being used on this WIFI network (maybe it is intercepting SSL connections and supplying its own SSL certificate) cannot be verified using the SSL certificates included with tsNet.

Regards,

Charles

simon.schvartzman
Posts: 318
Joined: Tue Jul 29, 2014 12:52 am
Location: Brazil

Re: How to deal with "tsneterr: (60) SSl certificate problem..."

Post by simon.schvartzman » Thu Apr 25, 2019 11:13 am

Hi Charles,
Is this issue something you have only seen on Android devices by any chance?
actually the issue was detected on an iPhone X.

Not sure if it has something to do with the problem but I should mention that the problem is happening in Dubai. There is just one user of the App there. Everything works OK when used connected to the Hotel Wifi and the issue appears when connected to the corporate Wifi.
Simon
________________________________________
To ";" or not to ";" that is the question

charlesBUSd8qF
VIP Livecode Opensource Backer
VIP Livecode Opensource Backer
Posts: 38
Joined: Wed Apr 11, 2012 10:28 pm

Re: How to deal with "tsneterr: (60) SSl certificate problem..."

Post by charlesBUSd8qF » Fri May 03, 2019 10:16 am

Hi,

Ok. It sounds like the corporate network the user is connecting to may require an additional SSL certificate to be installed on the device in order for SSL connections to be trusted properly.

Is the user able to browse SSL websites from that phone when connected to the corporate network?

Regards,

Charles

simon.schvartzman
Posts: 318
Joined: Tue Jul 29, 2014 12:52 am
Location: Brazil

Re: How to deal with "tsneterr: (60) SSl certificate problem..."

Post by simon.schvartzman » Sat May 04, 2019 2:07 am

Hi, unfortunately the user who reported the problem has left the country and I'll not be able to answer your question.
Is the user able to browse SSL websites from that phone when connected to the corporate network?
Unless another user reports the same problem (hope not...)

Regards and thanks
Simon
________________________________________
To ";" or not to ";" that is the question

shawnblc
VIP Livecode Opensource Backer
VIP Livecode Opensource Backer
Posts: 334
Joined: Fri Jun 01, 2012 11:11 pm
Location: USA

Re: How to deal with "tsneterr: (60) SSl certificate problem..."

Post by shawnblc » Fri May 17, 2019 2:14 am

Typically, you're going to see a SSL error when there's a domain mismatch. Another words a single domain cert vs a domain wildcard cert. A single domain cert is good for only the FQN, a wildcard cert would be good for sub-domains also.

Post Reply

Return to “Talking LiveCode”