Page 1 of 1
How to deal with "tsneterr: (60) SSl certificate problem..."
Posted: Wed Apr 24, 2019 12:59 pm
by simon.schvartzman
Just on some wifi networks users are getting the error below
when submitting a Dropbox upload transaction.
tsNetSetTimeouts is set as
Code: Select all
tsNetSetTimeouts 30, 0, 300000, 60000, 5, 1000
Same user/app when connected to another wifi works OK.
I suspect it has to do with the network configuration which I can't change and therefore I would like to know if there is any work around I could try.
My first approach would be to locally store the file for later upload when no such error is received but before following this path I would like to know if there are other solutions to be considered.
Many thanks...regards
Re: How to deal with "tsneterr: (60) SSl certificate problem..."
Posted: Wed Apr 24, 2019 3:18 pm
by FourthWorld
Who authorizes the cert?
Re: How to deal with "tsneterr: (60) SSl certificate problem..."
Posted: Wed Apr 24, 2019 3:28 pm
by simon.schvartzman
Answering to FourthWorld comment:
Who authorizes the cert?
No idea....I'm just using a "plain" dropboxUpload call which works OK on most Wifi networks but one
Code: Select all
dropboxUpload pAccessToken, pPathFrom, pMode, pAutorename, pMute, tData
if the result is not empty then
answer the result
end if
Re: How to deal with "tsneterr: (60) SSl certificate problem..."
Posted: Wed Apr 24, 2019 4:45 pm
by FourthWorld
I haven't looked up that tsNet error number, but the description sounds like it might be related to the authenticating server not fulfilling its function. Cheaper certs may conceivably have underprovisioned authentication servers. Just a hunch.
Does Firefox give any warning when attempting the same URL?
Re: How to deal with "tsneterr: (60) SSl certificate problem..."
Posted: Wed Apr 24, 2019 4:55 pm
by simon.schvartzman
Hi Richard many thanks for taking your time to help.
Does Firefox give any warning when attempting the same URL?
Not sure I understand your point as there is no URL involved, as I said I'm using just the LC dropbox library.
Re: How to deal with "tsneterr: (60) SSl certificate problem..."
Posted: Wed Apr 24, 2019 5:17 pm
by FourthWorld
You're right. I was thinking of something else. This is a cert issue, but the details are opaque to us, handled within the external.
I'll see if I can get the author of the external to chime in here.
Re: How to deal with "tsneterr: (60) SSl certificate problem..."
Posted: Thu Apr 25, 2019 10:01 am
by charlesBUSd8qF
Hi Simon,
Is this issue something you have only seen on Android devices by any chance?
For most operating systems, tsNet uses the SSL libraries (and SSL certificates) included with the device itself to establish and verify SSL connections. On Android, tsNet uses the OpenSSL library and a pre-defined SSL CA bundle (this is a set of root and intermediate certificates that are used to verify the SSL certificates of servers that you connect to).
That error indicates that the validity of an intermediate SSL certificate that is being used on this WIFI network (maybe it is intercepting SSL connections and supplying its own SSL certificate) cannot be verified using the SSL certificates included with tsNet.
Regards,
Charles
Re: How to deal with "tsneterr: (60) SSl certificate problem..."
Posted: Thu Apr 25, 2019 11:13 am
by simon.schvartzman
Hi Charles,
Is this issue something you have only seen on Android devices by any chance?
actually the issue was detected on an iPhone X.
Not sure if it has something to do with the problem but I should mention that the problem is happening in Dubai. There is just one user of the App there. Everything works OK when used connected to the Hotel Wifi and the issue appears when connected to the corporate Wifi.
Re: How to deal with "tsneterr: (60) SSl certificate problem..."
Posted: Fri May 03, 2019 10:16 am
by charlesBUSd8qF
Hi,
Ok. It sounds like the corporate network the user is connecting to may require an additional SSL certificate to be installed on the device in order for SSL connections to be trusted properly.
Is the user able to browse SSL websites from that phone when connected to the corporate network?
Regards,
Charles
Re: How to deal with "tsneterr: (60) SSl certificate problem..."
Posted: Sat May 04, 2019 2:07 am
by simon.schvartzman
Hi, unfortunately the user who reported the problem has left the country and I'll not be able to answer your question.
Is the user able to browse SSL websites from that phone when connected to the corporate network?
Unless another user reports the same problem (hope not...)
Regards and thanks
Re: How to deal with "tsneterr: (60) SSl certificate problem..."
Posted: Fri May 17, 2019 2:14 am
by shawnblc
Typically, you're going to see a SSL error when there's a domain mismatch. Another words a single domain cert vs a domain wildcard cert. A single domain cert is good for only the FQN, a wildcard cert would be good for sub-domains also.
Re: How to deal with "tsneterr: (60) SSl certificate problem..."
Posted: Tue Nov 14, 2023 5:57 pm
by richmond62
That is totally OT: so, was the initial question just click bait?
Re: How to deal with "tsneterr: (60) SSl certificate problem..."
Posted: Tue Nov 14, 2023 6:37 pm
by stam
The diatribe on Unveiling the Wonders of Burj Al Arab from a user with 1 post is prime example of prime, class A champion spam... there seems to be a lot of this of late...
Not sure I understand the OT/click bait comment?
Re: How to deal with "tsneterr: (60) SSl certificate problem..."
Posted: Tue Nov 14, 2023 6:50 pm
by richmond62
The initial question seemed sensible, so we clicked on it and got the OT stuff.