IE8 doesn't work with the new ssl module

Mikage Sawatari mikage@REDACTED
Fri Jul 23 09:24:54 CEST 2010


Hello,

The new ssl module in Erlang/OTP R14A can't communicate with Internet
Explorer 8. The problem doesn't arise with Firefox nor Google
Chrome. It can be reproduced by the following steps:

1. Place the attached cert.pem and key.pem to some directory.
2. In that directory, do the following:

     $ mkdir htdocs
     $ echo "Hello world." > htdocs/a.txt
     $ erl

     Erlang R14A (erts-5.8) [source] [64-bit] [smp:8:8] [rq:8]
[async-threads:0] [hipe] [kernel-poll:false]

     Eshell V5.8  (abort with ^G)
     1> inets:start().
     ok
     2> inets:start(httpd, [
     2>   {server_name,"localhost"},
     2>   {port,8888},
     2>   {document_root,"htdocs"},
     2>   {server_root,"."},
     2>   {socket_type, essl},
     2>   {ssl_certificate_file,"cert.pem"},
     2>   {ssl_certificate_key_file,"key.pem"}]).
     {ok,<0.46.0>}

3. Open https://localhost:8888/a.txt with IE8.
4. The following error occurs:

     3>
     =ERROR REPORT==== 23-Jul-2010::15:59:35 ===
     SSL: decipher_error: ./ssl_record.erl:680:Fatal error: bad record mac


-- 
-----------------------------------------------------------------------
SAWATARI Mikage (SANO Taku)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: key.pem
Type: application/octet-stream
Size: 887 bytes
Desc: not available
URL: <http://erlang.org/pipermail/erlang-bugs/attachments/20100723/f3ecdbe9/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cert.pem
Type: application/octet-stream
Size: 1594 bytes
Desc: not available
URL: <http://erlang.org/pipermail/erlang-bugs/attachments/20100723/f3ecdbe9/attachment-0001.obj>


More information about the erlang-bugs mailing list