Re: Error with SSL certificates and SSL Filter

Hello everyone,

I've tried the following program and it works under Debian Squeeze.

The message "POE::Filter::SSL: UNEXPECTED ERROR: ERR1:0 ERR2:1 HINT: 
Check if you have configured a CRT and KEY file, and that both are 
readable at /usr/share/perl5/POE/Wheel/ReadWrite.pm line 280" occures in 
my test only if the browser aborts the connection during SSL handshake 
because the certificate is untrusted. In any other case I can see the 
data the server is returning.

Dieser Verbindung wird nicht vertraut

Sie haben Firefox angewiesen, eine gesicherte Verbindung zu 
saytest.priv.de:82 aufzubauen, es kann aber nicht überprüft werden, ob 
die Verbindung sicher ist. Wenn Sie normalerweise eine gesicherte 
Verbindung aufbauen, weist sich die Website mit einer vertrauenswürdigen 
Identifikation aus, um zu garantieren, dass Sie die richtige Website 
besuchen. Die Identifikation dieser Website dagegen kann nicht bestätigt 
werden.

Was sollte ich tun?

Falls Sie für gewöhnlich keine Probleme mit dieser Website haben, könnte 
dieser Fehler bedeuten, dass jemand die Website fälscht. Sie sollten in 
dem Fall nicht fortfahren.

Much regards,
Markus Mueller

#!perl

use strict;
use warnings;
use Socket;
use POE qw(
    Wheel::SocketFactory
    Wheel::ReadWrite
    Driver::SysRW
    Filter::SSL
    Filter::Stackable
    Filter::HTTPD
    Component::Server::TCP
);
POE::Component::Server::TCP->new(
     Alias        => "web_server",
     Port         => 82,
     #ClientFilter => 'POE::Filter::HTTPD', ##WITHOUT HTTPD FILTER THERE 
ISN'T HTTP HEADERS!!!
     ClientFilter => POE::Filter::Stackable->new(
         Filters => [
             POE::Filter::SSL->new(crt => 'sslkeys/server.crt', key => 
'sslkeys/server.key'),
             POE::Filter::HTTPD->new(),
         ]
     ),

     ClientInput  => \&handle_http_request,
     InlineStates => {got_response => \&handle_http_response,},
);

sub handle_http_request {
    my ($kernel, $session, $heap, $buf) = @_[KERNEL, SESSION, HEAP, ARG0];
    my $content .= "Your URL was: ".$buf->uri."<hr>"
      if (ref($buf) eq "HTTP::Request");
    $content .= localtime(time());
    my $response = HTTP::Response->new(200);
    $response->push_header('Content-type', 'text/html');
    $response->content($content);
    $_[HEAP]{client}->put($response);
    $_[KERNEL]->yield("shutdown");
};

POE::Kernel->run;
exit;

>
> I am making a proxy and it must support the https protocol. I am
> trying to enable SSL feature in the server side with this command:
>
> POE::Component::Server::TCP->new(
>     Alias        => "web_server",
>     Port         => LISTEN_PORT,
>     #ClientFilter => 'POE::Filter::HTTPD', ##WITHOUT HTTPD FILTER
> THERE ISN'T HTTP HEADERS!!!
>     ClientFilter => POE::Filter::Stackable->new(
>         Filters => [
>             POE::Filter::SSL->new(crt => 'sslkeys/server.crt', key =>
> 'sslkeys/server.key'),
>             POE::Filter::HTTPD->new(),
>         ]
>     ),
>
>     ClientInput  => \&handle_http_request,
>     InlineStates => {got_response => \&handle_http_response,},
> );
>
> But when a https request hit the server I get the following error:
>
> POE::Filter::SSL: UNEXPECTED ERROR: ERR1:-1 ERR2:1 HINT: Check if you
> have configured a CRT and KEY file, and that both are readable at
> /usr/share/perl5/POE/Wheel/ReadWrite.pm line 280
>
>
> I don't know what this error means because the files has the
> permission flags set to 777. Are required some special certs?
>
> Thanks in advance.