Huge amount of errors Can not connect to ssl://www.google.com

Dagalidis · November 15, 2016 at 11:59 PM

Strange but since today my ACP is full of errors repeating multiple times ...

Code

Tue, 15 Nov 2016 22:36:30 +0000
Message: Can not connect to ssl://www.google.com
File: /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/io/RemoteFile.class.php (63)
PHP version: 7.0.13
WCF version: 2.1.12 (Typhoon)
Request URI: /community/index.php/Search/
Referrer: https://xiaomi-miui.gr/community/index.php/Search/?types%5B%5D=com.woltlab.wbb.post
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.87 Safari/537.36
Information: ""
Stacktrace: 
  #0 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/util/HTTPRequest.class.php(259): wcf\system\io\RemoteFile->__construct('ssl://www.googl...', 443, 10, Array)
  #1 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/recaptcha/RecaptchaHandlerV2.class.php(36): wcf\util\HTTPRequest->execute()
  #2 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/captcha/RecaptchaHandler.class.php(91): wcf\system\recaptcha\RecaptchaHandlerV2->validate('03AHJ_VutSeGfnM...')
  #3 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/form/AbstractCaptchaForm.class.php(102): wcf\system\captcha\RecaptchaHandler->validate()
  #4 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/form/AbstractCaptchaForm.class.php(94): wcf\form\AbstractCaptchaForm->validateCaptcha()
  #5 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/form/SearchForm.class.php(243): wcf\form\AbstractCaptchaForm->validate()
  #6 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/form/AbstractForm.class.php(61): wcf\form\SearchForm->validate()
  #7 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/form/SearchForm.class.php(304): wcf\form\AbstractForm->submit()
  #8 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/form/AbstractForm.class.php(114): wcf\form\SearchForm->submit()
  #9 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/form/AbstractCaptchaForm.class.php(63): wcf\form\AbstractForm->readData()
  #10 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/page/AbstractPage.class.php(273): wcf\form\AbstractCaptchaForm->readData()
  #11 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/form/SearchForm.class.php(417): wcf\page\AbstractPage->show()
  #12 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/page/AbstractPage.class.php(100): wcf\form\SearchForm->show()
  #13 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/request/Request.class.php(58): wcf\page\AbstractPage->__run()
  #14 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/request/RequestHandler.class.php(139): wcf\system\request\Request->execute()
  #15 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/index.php(10): wcf\system\request\RequestHandler->handle('wbb')
  #16 {main}

Display More

Code

Tue, 15 Nov 2016 22:36:41 +0000
Message: Can not connect to ssl://www.google.com
File: /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/io/RemoteFile.class.php (63)
PHP version: 7.0.13
WCF version: 2.1.12 (Typhoon)
Request URI: /community/index.php/Register/
Referrer: https://xiaomi-miui.gr/community/index.php/Register/
User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:49.0) Gecko/20100101 Firefox/49.0
Information: ""
Stacktrace: 
  #0 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/util/HTTPRequest.class.php(259): wcf\system\io\RemoteFile->__construct('ssl://www.googl...', 443, 10, Array)
  #1 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/recaptcha/RecaptchaHandlerV2.class.php(36): wcf\util\HTTPRequest->execute()
  #2 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/captcha/RecaptchaHandler.class.php(91): wcf\system\recaptcha\RecaptchaHandlerV2->validate('03AHJ_VuvqiDyfD...')
  #3 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/form/RegisterForm.class.php(246): wcf\system\captcha\RecaptchaHandler->validate()
  #4 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/form/RegisterForm.class.php(155): wcf\form\RegisterForm->validateCaptcha()
  #5 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/form/AbstractForm.class.php(61): wcf\form\RegisterForm->validate()
  #6 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/form/AbstractForm.class.php(114): wcf\form\AbstractForm->submit()
  #7 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/acp/form/AbstractOptionListForm.class.php(100): wcf\form\AbstractForm->readData()
  #8 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/acp/form/UserAddForm.class.php(370): wcf\acp\form\AbstractOptionListForm->readData()
  #9 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/form/RegisterForm.class.php(184): wcf\acp\form\UserAddForm->readData()
  #10 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/page/AbstractPage.class.php(273): wcf\form\RegisterForm->readData()
  #11 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/form/RegisterForm.class.php(237): wcf\page\AbstractPage->show()
  #12 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/page/AbstractPage.class.php(100): wcf\form\RegisterForm->show()
  #13 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/request/Request.class.php(58): wcf\page\AbstractPage->__run()
  #14 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/request/RequestHandler.class.php(139): wcf\system\request\Request->execute()
  #15 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/index.php(10): wcf\system\request\RequestHandler->handle('wbb')
  #16 {main}

Display More

Code

Tue, 15 Nov 2016 19:38:09 +0000
Message: Can not connect to ssl://accounts.google.com
File: /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/io/RemoteFile.class.php (63)
PHP version: 7.0.13
WCF version: 2.1.12 (Typhoon)
Request URI: /community/index.php/GoogleAuth/?state=***REMOVED FOR SECURITY REASONS***
Referrer: https://xiaomi-miui.gr/community/index.php/Login/
User-Agent: Mozilla/5.0 (Linux; U; Android 5.1.1; el-gr; Mi-4c Build/Libra THUNDER) AppleWebKit/537.16 (KHTML, like Gecko) Version/4.0 Mobile Safari/537.16 Chrome/33.0.0.0
Information: ""
Stacktrace: 
  #0 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/util/HTTPRequest.class.php(259): wcf\system\io\RemoteFile->__construct('ssl://accounts....', 443, 10, Array)
  #1 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/action/GoogleAuthAction.class.php(52): wcf\util\HTTPRequest->execute()
  #2 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/action/AbstractAction.class.php(49): wcf\action\GoogleAuthAction->execute()
  #3 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/request/Request.class.php(58): wcf\action\AbstractAction->__run()
  #4 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/request/RequestHandler.class.php(139): wcf\system\request\Request->execute()
  #5 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/index.php(10): wcf\system\request\RequestHandler->handle('wbb')
  #6 {main}

Display More

Before this I Have huge amount of errors about Facebook Auth Service

Code

Tue, 15 Nov 2016 03:32:44 +0000
Message: Received unhandled status code '400' from server
File: /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/util/HTTPRequest.class.php (526)
PHP version: 7.0.12
WCF version: 2.1.12 (Typhoon)
Request URI: /community/index.php/FacebookAuth/?code=***REMOVED FOR SECURITY REASONS***
Referrer: https://m.facebook.com/login.php?skip_api_login=1&api_key=1554857878087057&signed_next=1&next=https%3A%2F%2Fm.facebook.com%2Fv2.2%2Fdialog%2Foauth%3Fredirect_uri%3Dhttps%253A%252F%252Fxiaomi-miui.gr%252Fcommunity%252Findex.php%252FFacebookAuth%252F%26state%3Dc05837c93061260521659f0959c7ff43a2575142%26scope%3Demail%252Cuser_about_me%252Cuser_birthday%252Cuser_location%252Cuser_website%26client_id%3D1554857878087057%26ret%3Dlogin%26logger_id%3D843196df-c4ba-4d07-817c-08bf05c2d3b4&cancel_url=https%3A%2F%2Fxiaomi-miui.gr%2Fcommunity%2Findex.php%2FFacebookAuth%2F%3Ferror%3Daccess_denied%26error_code%3D200%26error_description%3DPermissions%2Berror%26error_reason%3Duser_denied%26state%3Dc05837c93061260521659f0959c7ff43a2575142%23_%3D_&display=touch&locale=id_ID&logger_id=843196df-c4ba-4d07-817c-08bf05c2d3b4&_rdr
User-Agent: Mozilla/5.0 (Linux; U; Android 6.0; en-US; Redmi Pro Build/MRA58K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.8.855 U3/0.8.0 Mobile Safari/534.30
Information: ""
Stacktrace: 
  #0 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/util/HTTPRequest.class.php(384): wcf\util\HTTPRequest->parseReply()
  #1 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/action/FacebookAuthAction.class.php(51): wcf\util\HTTPRequest->execute()
  #2 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/action/AbstractAction.class.php(49): wcf\action\FacebookAuthAction->execute()
  #3 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/request/Request.class.php(58): wcf\action\AbstractAction->__run()
  #4 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/request/RequestHandler.class.php(139): wcf\system\request\Request->execute()
  #5 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/index.php(10): wcf\system\request\RequestHandler->handle('wbb')
  #6 {main}

Display More

Code

Tue, 15 Nov 2016 03:36:44 +0000
Message: Received unhandled status code '400' from server
File: /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/util/HTTPRequest.class.php (526)
PHP version: 7.0.12
WCF version: 2.1.12 (Typhoon)
Request URI: /community/index.php/FacebookAuth/?********I REMOVE THIS STRING FOR SECURITY REASSONS***********
Referrer: https://xiaomi-miui.gr/community/index.php/Terms/?aboutToRegister=1
User-Agent: Mozilla/5.0 (Linux; U; Android 6.0; en-US; Redmi Pro Build/MRA58K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.8.855 U3/0.8.0 Mobile Safari/534.30
Information: ""
Stacktrace: 
  #0 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/util/HTTPRequest.class.php(384): wcf\util\HTTPRequest->parseReply()
  #1 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/action/FacebookAuthAction.class.php(51): wcf\util\HTTPRequest->execute()
  #2 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/action/AbstractAction.class.php(49): wcf\action\FacebookAuthAction->execute()
  #3 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/request/Request.class.php(58): wcf\action\AbstractAction->__run()
  #4 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/wcf/lib/system/request/RequestHandler.class.php(139): wcf\system\request\Request->execute()
  #5 /var/www/vhosts/xiaomi-miui.gr/xiaomi-miui.gr/community/index.php(10): wcf\system\request\RequestHandler->handle('wbb')
  #6 {main}

Display More

I am trying to figure out what is going on here but I can't
Ignore the ********I REMOVE THIS STRING FOR SECURITY REASSONS*********** because for security reasons I removed the string from the source code.
Any help about this issue because as far I understand we have problems in registration and login in our forums now.

Dagalidis · November 16, 2016 at 2:01 AM

UPDATE !

~~I believe the problem was the API used...~~
~~The Google+ API was a part of multiple APIs in the same Project.~~
~~Two of those APIs in the same project was expired from free-trial Version, and the total Project expired and had to Upgrade in Paid Version.~~

~~So,,,~~
~~I deleted the old Project - created new one with only Google+ API inside, and now seems all working fine now.~~

~~I will keep this thread live for the next 24 hours to ensure that all are ok, and inform you again.~~

~~I hope that the Problem with Facebook also, was something related with Facebook Home page and not any problem of my own side.~~
~~5 hours passed without any new error log for Facebook Auth problem.~~

No,,,

Finally the problem is still here....
Not fixed !!!

Dimitris.

**Andrea Berg** · November 16, 2016 at 10:42 AM Official Post

Have you changed something on the server (updates installed, something uninstalled)?

No external connections can be created. This indicates a firewall or SSL certificate problem.

Dagalidis · November 16, 2016 at 2:21 PM

Firewall is ok and double checked.
I use apf firewall and for testing disabled but nothing changed.
SSL Certificate is fine and from Cloudflare CDN which I use.
NTP Clock is fine also and SSL is valid.

Now we are bleeding because loosing new Registrations - Registered Users can't auto-login through Google+ - they using Forgot password to have access to our forums but nothing received.
Big - big mess and I don't know why ...

Facebook auth is fine - Linked-in Auth is fine - Skype auth is fine - and Github also.
Only Google+ is fail.

Here is my SSL test...

**Andrea Berg** · November 16, 2016 at 2:37 PM Official Post

Run the following command in the bash: openssl s_client -connect google.com:443 -state

What message do you get at "Verify return code"?

Dagalidis · November 16, 2016 at 3:22 PM

Start Time: 1479305770
Timeout : 300 (sec)
Verify return code: 0 (ok)

Added the following in nginx.conf

Code

server {
	listen 5.9.39.210:443 default_server ssl http2;
	server_name xiaomi-miui.gr;
	server_name www.xiaomi-miui.gr;
	server_name ipv4.xiaomi-miui.gr;
	add_header Strict-Transport-Security "max-age=31536000;";
	ssl_certificate             /usr/local/psa/var/certificates/cert-0R2Fe8;
	ssl_certificate_key         /usr/local/psa/var/certificates/cert-0R2Fe8;
        ssl_session_cache shared:SSL:40m;
        ssl_session_timeout 20m;
        ssl_stapling on;
        resolver 8.8.8.8 8.8.4.4 208.67.222.222 208.67.220.220 valid=300s;
        ssl_stapling_verify on;
        ssl_trusted_certificate /usr/local/psa/var/certificates/cert-0R2Fe8;
	ssl_protocols               TLSv1 TLSv1.1 TLSv1.2;
	ssl_ciphers                 ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS;
	ssl_prefer_server_ciphers   on;
	client_max_body_size 128m;
	proxy_read_timeout 3000;

Display More

New lines added was ...

ssl_stapling on;
resolver 8.8.8.8 8.8.4.4 208.67.222.222 208.67.220.220 valid=300s;
ssl_stapling_verify on;
ssl_trusted_certificate /usr/local/psa/var/certificates/cert-0R2Fe8;

I get now nginx: [warn] "ssl_stapling" ignored, issuer certificate not found when hit nginx reload command but is working fine now.

Maybe resolver did the job but I don't know...

Dagalidis · November 16, 2016 at 3:37 PM

Success ?
I hope so

And Google+ API seems work fine now and serving Requests without problems...

Dagalidis · November 16, 2016 at 4:28 PM

Yeap.
All are back to normal now.

No errors so far and All external authentications are working fine including Google+ also.

You can close the case now my friend and thanks for your Awesome Support ...

**Andrea Berg** · November 16, 2016 at 5:15 PM Official Post

You're welcome

SoftCreatR · November 16, 2016 at 5:24 PM

You can disable ssl stapling. You are using CF so it doesn't apply.

Participate now!