kindle touch 5.0.0 to kindle touch 5.1.0. Any reason I should not upgrade? - Page 2

ixtab · 04-29-2012, 11:53 AM

Hi,

I can confirm that it does not work on my KT either. I tried poking around a bit to find out what is causing this (and why it would be different from previous versions).

First things first: I don't have a solution, only an explanation.

In the web browser source code, the error with internal code "net-ssl-certificate-failed" is handled, and displays the "Invalid certificate, do you still want to proceed?" dialog. Obviously, in previous firmware versions, this was also the error that was generated.

Not so on 5.1.0. In fact, we get a different error: "net-ssl-failed". Here's the relevant log entry:

Code:

120429:144136 wafapp[7722]: E com.lab126.browser:NetworkManager::requestFinishedCallback:HTTP failed: reason [6, SSL handshake failed]:

This is a much worse condition, because it indicates that the Kindle is unable to communicate with the other host at all. In fact, it won't even be able to retrieve the certificate for checking it. In a sense, this is as if the Kindle was trying to speak chinese with the server, but the server only understands flemish. Technically, the most common cause for such things is that the client and server cannot agree on a common protocol or cipher suite.

The message seems to originate from /usr/lib/libsoup-2.4.so.1.4.0, but I can't say much more than that.

Feel free to contact amazon with the above information. It may also be worthwile to contact your provider, because their servers aren't exactly in good shape either: https://www.ssllabs.com/ssltest/anal...mail.skynet.be

To conclude, there is probably nothing you can do about it at this time. Either Amazon, or Skynet, or both, need to fix something.

PS: The solution *may* be as simple as Skynet actually providing the entire certificate chain correctly ("Chain issues: Incomplete" in the abovementioned Server Test Report), but no guarantees.

albert.nadette · 04-29-2012, 12:48 PM

Hi ixtab, thanks for having made the trial and for the very good explanation!

I have contacted Amazon and forwarded them some log files they requested...

I could contact skynet but unfortunately this is not the only site that is giving the problem... Let's hope there will be a fix in the next update.

Thanks again.

04-29-2012, 11:53 AM	#16
ixtab (offline) Posts: 2,907 Karma: 6736094 Join Date: Dec 2011 Device: K3, K4, K5, KPW, KPW2	Hi, I can confirm that it does not work on my KT either. I tried poking around a bit to find out what is causing this (and why it would be different from previous versions). First things first: I don't have a solution, only an explanation. In the web browser source code, the error with internal code "net-ssl-certificate-failed" is handled, and displays the "Invalid certificate, do you still want to proceed?" dialog. Obviously, in previous firmware versions, this was also the error that was generated. Not so on 5.1.0. In fact, we get a different error: "net-ssl-failed". Here's the relevant log entry: Code: 120429:144136 wafapp[7722]: E com.lab126.browser:NetworkManager::requestFinishedCallback:HTTP failed: reason [6, SSL handshake failed]: This is a much worse condition, because it indicates that the Kindle is unable to communicate with the other host at all. In fact, it won't even be able to retrieve the certificate for checking it. In a sense, this is as if the Kindle was trying to speak chinese with the server, but the server only understands flemish. Technically, the most common cause for such things is that the client and server cannot agree on a common protocol or cipher suite. The message seems to originate from /usr/lib/libsoup-2.4.so.1.4.0, but I can't say much more than that. Feel free to contact amazon with the above information. It may also be worthwile to contact your provider, because their servers aren't exactly in good shape either: https://www.ssllabs.com/ssltest/anal...mail.skynet.be To conclude, there is probably nothing you can do about it at this time. Either Amazon, or Skynet, or both, need to fix something. PS: The solution may be as simple as Skynet actually providing the entire certificate chain correctly ("Chain issues: Incomplete" in the abovementioned Server Test Report), but no guarantees. Last edited by ixtab; 04-29-2012 at 11:56 AM.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Kindle Touch, Nook Touch or Kobo Touch?	tron_1970	Which one should I buy?	33	05-01-2012 12:15 PM
Kindle Touch (with jb) fails to upgrade to 5.0.3	mad77	Kindle Developer's Corner	5	02-09-2012 02:46 AM
Torn: Nook Simple Touch, Kindle Touch, Basic Kindle	dblb48	Which one should I buy?	12	12-13-2011 02:34 PM
Reason to Upgrade from Wifi to Touch ?	DavidF	Kobo Reader	9	12-02-2011 06:16 PM
Kindle 3, Nook Simple Touch, Kobo Touch and Libra Pro Touch	jbcohen	Which one should I buy?	4	06-18-2011 07:58 PM

04-29-2012, 12:48 PM	#17
albert.nadette Junior Member Posts: 4 Karma: 10 Join Date: Apr 2012 Device: Kindle Touch	Hi ixtab, thanks for having made the trial and for the very good explanation! I have contacted Amazon and forwarded them some log files they requested... I could contact skynet but unfortunately this is not the only site that is giving the problem... Let's hope there will be a fix in the next update. Thanks again.

Advert