maindavfs2 - Support: sr #108706, Cannot connect to DAV using HTTPS

 
 

sr #108706: Cannot connect to DAV using HTTPS

Submitter:  Alex Radice <alexradice>
Submitted:  Thu 18 Dec 2014 11:13:55 AM UTC
   
 
Category:  None Priority:  5 - Normal
Severity:  3 - Normal Status:  In Progress
Privacy:  Public Assigned to:  _71007
Open/Closed:  Closed Operating System:  GNU/Linux
* Mandatory Fields

Add a New Comment Rich Markup
   

Mon 05 Jan 2015 11:53:22 AM UTC, comment #3: 

Thank you very much for your detailed reply. I haven't tried it out yet but I've got it ready to try as soon as the prospect of needing to get this working looms a little closer. I'll let you know of my progress when I do, probably best to mark this issue as closed/done in the meantime.

Many thanks again,

Alex.

Alex Radice <alexradice>
Sun 28 Dec 2014 11:29:52 AM UTC, comment #2: 

Sorry for the late reply and thanks for the information about libgnutls-deb0-28.

There have been several reports that some servers will close the connection when gnutls tries to establish a connection with TLS1.2. I don't know what the reason for this is, but it seems that newer versions of gnutls solved the problem.

To get davfs2 running on Ubuntu 14.04 the easiest way would be to compile davfs2 with the neon library that uses openssl.

  • you need to have libneon27 installed (it probably already is).
  • you need libneon27-dev installed. This will remove libneon-gnutls-dev, if installed. The -dev-packages contain the headers needed to build davfs2.
  • remove the davfs2-package.
  • get davfs2-1.5.2.tar.gz from this server, unpack it somewhere in your home directory and cd into the top-level directory of the davfs2 sources.
  • run "./configure"
  • run "make"
  • get superuser privileges and run "make install"

davfs2 will be installed in /usr/local to not conflict with the package management. As a side effect the system-wide configuration files will be in /usr/local/etc (not in /etc). Configuration files in ~/.davfs2 will not be affected.

A cleaner solution would be to use libgnutls-deb0-28 from the Debian wheezy-backports repository and to create backports of libneon27-gnutls and davfs2. But this would require a lot of additional work.

Werner

- <_71007>
Wed 24 Dec 2014 11:52:26 AM UTC, comment #1: 

UPDATE: I tried the same operations on Ubuntu 14.10 and found that now I am able to mount my WebDAV repository using davfs2 without any SSL errors.  I can also connect using cadaver.  Looking at the package dependencies I can see that both no longer depend upon libgnutls26 any more, but instead use libgnutls-deb0-28 which is new in Utopic.  Maybe this is what has fixed the issue.

Ideally I would like to be able to get this working on 14.04 as that is the most recent Long Tterm Support Ubuntu release, but this issue is lower priority now.

Alex Radice <alexradice>
Thu 18 Dec 2014 11:13:55 AM UTC, original submission:  

I am attempting to use davfs2 to connect to a WebDAV repository. The repository uses https, and the SSL certificate uses the "AddTrust External CA Root" certificate as its root CA. When I attempt a mount using davfs2 I see this:

alex@ubuntu1404:/media$ sudo mount -t davfs https://app.docstage.net/ /media/iisdav/ [sudo] password for alex:
Please enter the username to authenticate with server https://app.docstage.net/ or hit enter for none.
  Username:
Please enter the password to authenticate user  with server https://app.docstage.net/ or hit enter for none.
  Password: 
/sbin/mount.davfs: Mounting failed.
SSL handshake failed: Secure connection truncated

(there is no username or password).
But I can browse to the Url just fine using FireFox, and can retrieve it using curl (see below):

alex@ubuntu1404:/media$ curl -I https://app.docstage.net
HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 7125
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Thu, 18 Dec 2014 10:41:55 GMT

I also tried to connect to the DAV using cadaver, and got a similar result:

alex@ubuntu1404: /media$ cadaver https://app.docstage.net Could not open collection:
SSL handshake failed: Secure connection truncated

The fact that both davfs2 and cadaver fail in the same way made me wonder if there was an underlying problem with the list of CA certificates on the system, but when I look at the ca-certificates package it looks like the one that I need is present:

alex@ubuntu1404:/media$ dpkg -L ca-certificates | grep -i 'AddTrust'
/usr/share/ca-certificates/mozilla/AddTrust_Public_Services_Root.crt
/usr/share/ca-certificates/mozilla/AddTrust_Low-Value_Services_Root.crt
/usr/share/ca-certificates/mozilla/AddTrust_External_Root.crt
/usr/share/ca-certificates/mozilla/AddTrust_Qualified_Certificates_Root.crt
alex@ubuntu1404:/media$

Please help! I am using 64 bit Ubuntu 14.04.

Thank you,

Alex.

Alex Radice <alexradice>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by _71007 (Posted a comment)
  • -email is unavailable- added by alexradice (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2016-04-15 _71007 Open/ClosedOpen Closed
    2014-12-28 _71007 StatusNone In Progress
        Assigned toNone _71007

    Back to the top

    Powered by Savane 3.13-d3ae.
    Corresponding source code