<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Geoff,<br>
<br>
Take my advice with a grain of salt, but my next steps would be:<br>
<br>
1. Attempt using other SSL protocols (you can specify in bb-hosts).
Your Webshield appliance may be expecting something other than the
default method that Hobbit uses. Here is a snippet from the bb-hosts
man page:<br>
<br>
<tt>Some SSL sites will only allow you to connect, if you use
specific "dialects" of HTTP or SSL. Normally this is auto-negotiated,
but experience shows that this fails on some systems.
</tt>
<p><tt>bbtest-net can be told to use specific dialects, by adding
one or more "dialect names" to the URL scheme, i.e. the
"http" or "https" in the URL:
</tt></p>
<p><tt>* "2", e.g. https2://<a href="http://www.sample.com">www.sample.com</a>/
: use only SSLv2
<br>
* "3", e.g. https3://<a href="http://www.sample.com">www.sample.com</a>/
: use only SSLv3
<br>
* "m", e.g. <a href="httpsm://www.sample.com/">httpsm://www.sample.com/</a>
: use only 128-bit ciphers
<br>
* "h", e.g. <a href="httpsh://www.sample.com/">httpsh://www.sample.com/</a>
: use only >128-bit ciphers
<br>
* "10", e.g. http10://<a href="http://www.sample.com">www.sample.com</a>/
: use HTTP 1.0
<br>
* "11", e.g. http11://<a href="http://www.sample.com">www.sample.com</a>/
: use HTTP 1.1
</tt></p>
<p><tt>These can be combined where it makes sense, e.g to force
SSLv2 and HTTP 1.0 you would use "https210".</tt>
</p>
I suspect that one of the options above will fix your problem. My only
other advice if none of that works would be to check the hobbit logs,
especially bb-network.log. I would also consider editing the [bbnet]
section of hobbitlaunch.cfg, adding the --debug flag to the CMD
options, and then restarting hobbit and then watch stdout and/or the
bb-network.log to see if it indicates what the problem is.<br>
<br>
-Charles<br>
<br>
Geoff Hallford wrote:
<blockquote
cite="mid78ca5ea20612181229j7c96cb6m5f48bfddb5a44ac0@mail.gmail.com"
type="cite">Hi Charles,<br>
<br>
I just used wget w/ SSL to download the file fine but it did complain
about the certificate name. Would an invalid certificate affect Hobbit
use of HTTPS?:<br>
<br>
bigbrother:/hobbit/server/www # wget <a
href="https://142.224.108.83/apps/SCMClientWin32.exe">
https://142.224.108.83/apps/SCMClientWin32.exe</a>
--no-check-certificate<br>
--15:27:35-- <a href="https://142.224.108.83/apps/SCMClientWin32.exe">https://142.224.108.83/apps/SCMClientWin32.exe</a><br>
=> `SCMClientWin32.exe'
<br>
Connecting to <a href="http://142.224.108.83:443">142.224.108.83:443</a>...
connected.<br>
WARNING: Certificate verification error for <a
href="http://142.224.108.83">142.224.108.83</a>: self signed
certificate<br>
WARNING: certificate common name `Webshield.uhn.ca' doesn't match
requested host name `142.224.108.83'.
<br>
HTTP request sent, awaiting response... 200 OK<br>
Length: 12,905,984 (12M) [application/octet-stream]<br>
<br>
100%[===========================================================================================================>]
12,905,984 3.51M/s ETA 00:00<br>
<br>
15:27:41 (3.48 MB/s) - `SCMClientWin32.exe' saved [12905984/12905984]<br>
<br>
<br>
<div><span class="gmail_quote">On 12/18/06, <b
class="gmail_sendername">Charles Jones</b> <<a
href="mailto:jonescr@cisco.com">
jonescr@cisco.com</a>> wrote:</span>
<blockquote class="gmail_quote"
style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div bgcolor="#ffffff" text="#000000">Geoff,<br>
<br>
I guess the next thing to try would be another tool using HTTPs from
the hobbit server itself. Either elinks-ssl, curl, or wget w/ SSL
support. The goal being to narrow it down to definitely a problem with
Hobbit. <br>
<br>
P.S. I noticed in the Apache banner it says it is on port 1443 instead
of the usual 443, so there may be some proxy server or vhost that
Hobbit has to go through, which could potentially be part of the
problem.<br>
<br>
Good luck and let us know if you find the answer.<span class="q"><br>
<br>
-Charles<br>
<br>
Geoff Hallford wrote:
<blockquote
cite="http://mid78ca5ea20612181120w58b61eccq8ab1ba42b8e66db@mail.gmail.com"
type="cite">Hi Charles,<br>
<br>
This is a McAfee Webshield appliance, so I can't go in and check the
Apache log. I know the URL is good though because I can access it via
any browser from my PC. It's only Hobbit that has an issue with it. <br>
<br>
Any other thoughts?<br>
<br>
Thanks.<br>
<br>
<div><span class="gmail_quote">On 12/18/06, <b
class="gmail_sendername">Charles Jones</b> <<a
href="mailto:jonescr@cisco.com" target="_blank"
onclick="return top.js.OpenExtLink(window,event,this)">jonescr@cisco.com</a>
> wrote:</span>
<blockquote class="gmail_quote"
style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div bgcolor="#ffffff" text="#000000">HTTPS is definitely
working,
or else you would not get the Apache
banner at the end. It looks like you are simply checking an invalid
URL. Check your apache error log and see if it indicates that
SCMClientWin32.exe is being requested from an incorrect path or
something.<br>
<span><br>
-Charles</span>
<div><span><br>
<br>
Geoff Hallford wrote:
<blockquote
cite="http://mid78ca5ea20612181105q40342db6tf9aeecaccdfaf0be@mail.gmail.com"
type="cite">Hi Everyone,<br>
<br>
I still have problems getting Hobbit to check URL's that are HTTP*S*. I
have compiled with SSL support and the testing does work on items such
as LDAPS and SSH but it will not work for HTTPS. Does anyone have any
thoughts? I get the following message: <br>
<br>
---<br>
<br>
Mon Dec 18 14:01:59 2006:
<pre><a href="https://142.224.108.83/apps/SCMClientWin32.exe"
target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">https://142.224.108.83/apps/SCMClientWin32.exe</a> -
Not Found
The requested URL /error/HTTP_BAD_REQUEST.html.var was not found on this server.
Additionally, a 404 Not Found
<p>error was encountered while trying to use an ErrorDocument to handle the request.</p><p>
</p><hr><address>Apache/2.0.55 (Unix) Server at localhost Port 1443</address>
Seconds:
0.00
</pre>
</blockquote>
<br>
</span></div>
</div>
</blockquote>
</div>
<br>
<br clear="all">
<br>
-- <br>
'If my answers frighten you then you should cease asking scary
questions.' --Sam Jackson from Pulp Fiction
</blockquote>
<br>
</span></div>
</blockquote>
</div>
<br>
<br clear="all">
<br>
-- <br>
'If my answers frighten you then you should cease asking scary
questions.' --Sam Jackson from Pulp Fiction
</blockquote>
<br>
</body>
</html>