{"action":"created","issue":{"url":"https://api.github.com/repos/konklone/shaaaaaaaaaaaaa/issues/76","labels_url":"https://api.github.com/repos/konklone/shaaaaaaaaaaaaa/issues/76/labels{/name}","comments_url":"https://api.github.com/repos/konklone/shaaaaaaaaaaaaa/issues/76/comments","events_url":"https://api.github.com/repos/konklone/shaaaaaaaaaaaaa/issues/76/events","html_url":"https://github.com/konklone/shaaaaaaaaaaaaa/issues/76","id":65378307,"number":76,"title":"Getting error trying to check site","user":{"login":"robotD3vil","id":11732245,"avatar_url":"https://avatars.githubusercontent.com/u/11732245?v=3","gravatar_id":"","url":"https://api.github.com/users/robotD3vil","html_url":"https://github.com/robotD3vil","followers_url":"https://api.github.com/users/robotD3vil/followers","following_url":"https://api.github.com/users/robotD3vil/following{/other_user}","gists_url":"https://api.github.com/users/robotD3vil/gists{/gist_id}","starred_url":"https://api.github.com/users/robotD3vil/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/robotD3vil/subscriptions","organizations_url":"https://api.github.com/users/robotD3vil/orgs","repos_url":"https://api.github.com/users/robotD3vil/repos","events_url":"https://api.github.com/users/robotD3vil/events{/privacy}","received_events_url":"https://api.github.com/users/robotD3vil/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-03-31T06:28:30Z","updated_at":"2015-04-03T17:21:31Z","closed_at":"2015-04-02T04:44:51Z","body":"Hi,\r\n\r\nI'm trying to track down a problem with one of my sites.   I used the online service and was getting a fail for my site demo.netbi.net.au.\r\n\r\nIn the browser console I get the message -\r\n\r\nCommand failed: depth=2 C = US, O = GeoTrust Inc., CN = GeoTrust Global CA\r\nverify error:num=20:unable to get local issuer certificate\r\nverify return:0\r\n139950555604640:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:177:\r\n\r\n\r\nI downloaded shaaaaaaaaaaaaa and tried running the command line version, to see what was going on.\r\n\r\nI get this error -\r\n\r\nhermes:shaaaaaaaaaaaaa-master rme$ ./bin/shaaaaaaaaaaaaa demo.netbi.net.au\r\n/Users/rme/sha/shaaaaaaaaaaaaa-master/node_modules/x509/index.js:10\r\n  var ret = x509.parseCert(path);\r\n                 ^\r\nTypeError: Certificate must be a string.\r\n    at TypeError (native)\r\n    at Object.exports.parseCert (/Users/rme/sha/shaaaaaaaaaaaaa-master/node_modules/x509/index.js:10:18)\r\n    at Object.Shaaa.cert (/Users/rme/sha/shaaaaaaaaaaaaa-master/shaaaaa.js:127:21)\r\n    at /Users/rme/sha/shaaaaaaaaaaaaa-master/shaaaaa.js:171:25\r\n    at /Users/rme/sha/shaaaaaaaaaaaaa-master/shaaaaa.js:115:7\r\n    at ChildProcess.exithandler (child_process.js:735:7)\r\n    at ChildProcess.emit (events.js:110:17)\r\n    at maybeClose (child_process.js:1008:16)\r\n    at Socket.<anonymous> (child_process.js:1176:11)\r\n    at Socket.emit (events.js:107:17)\r\n\r\nHas anyone seen this before? \r\n\r\nI have another site which works fine - apps.netbi.net.au.  It's on a different server, but running the same Geotrust SHA-2 wildcard certificate.\r\n\r\nI've come to this site due to a problem I'm having with Google Chrome, where I am unable to access demo.netbi.net.au since the last Chrome update.  I'm thinking it has something to do with my SHA-2 certificate setup, but can't figure out what.\r\n\r\nAny help would be greatly appreciated."},"comment":{"url":"https://api.github.com/repos/konklone/shaaaaaaaaaaaaa/issues/comments/89366570","html_url":"https://github.com/konklone/shaaaaaaaaaaaaa/issues/76#issuecomment-89366570","issue_url":"https://api.github.com/repos/konklone/shaaaaaaaaaaaaa/issues/76","id":89366570,"user":{"login":"jonnybarnes","id":108303,"avatar_url":"https://avatars.githubusercontent.com/u/108303?v=3","gravatar_id":"","url":"https://api.github.com/users/jonnybarnes","html_url":"https://github.com/jonnybarnes","followers_url":"https://api.github.com/users/jonnybarnes/followers","following_url":"https://api.github.com/users/jonnybarnes/following{/other_user}","gists_url":"https://api.github.com/users/jonnybarnes/gists{/gist_id}","starred_url":"https://api.github.com/users/jonnybarnes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jonnybarnes/subscriptions","organizations_url":"https://api.github.com/users/jonnybarnes/orgs","repos_url":"https://api.github.com/users/jonnybarnes/repos","events_url":"https://api.github.com/users/jonnybarnes/events{/privacy}","received_events_url":"https://api.github.com/users/jonnybarnes/received_events","type":"User","site_admin":false},"created_at":"2015-04-03T17:21:30Z","updated_at":"2015-04-03T17:21:30Z","body":"For reference this is what OpenSSL says when I try to connect:\r\n\r\n```\r\n➜  ~  brewssl s_client -connect demo.netbi.net.au:443 -servername demo.netbi.net.au -CAfile /usr/local/etc/openssl/cert.pem\r\nCONNECTED(00000003)\r\ndepth=3 C = US, O = Equifax, OU = Equifax Secure Certificate Authority\r\nverify return:1\r\ndepth=2 C = US, O = GeoTrust Inc., CN = GeoTrust Global CA\r\nverify return:1\r\ndepth=1 C = US, O = GeoTrust Inc., CN = RapidSSL SHA256 CA - G3\r\nverify return:1\r\ndepth=0 OU = GT38651010, OU = See www.rapidssl.com/resources/cps (c)14, OU = Domain Control Validated - RapidSSL(R), CN = *.netbi.net.au\r\nverify return:1\r\n140735164146512:error:140790E5:SSL routines:ssl23_write:ssl handshake failure:s23_lib.c:177:\r\n---\r\nCertificate chain\r\n 0 s:/OU=GT38651010/OU=See www.rapidssl.com/resources/cps (c)14/OU=Domain Control Validated - RapidSSL(R)/CN=*.netbi.net.au\r\n   i:/C=US/O=GeoTrust Inc./CN=RapidSSL SHA256 CA - G3\r\n 1 s:/C=US/O=GeoTrust Inc./CN=RapidSSL SHA256 CA - G3\r\n   i:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA\r\n 2 s:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA\r\n   i:/C=US/O=Equifax/OU=Equifax Secure Certificate Authority\r\n---\r\nServer certificate\r\n-----BEGIN CERTIFICATE-----\r\nMIIEsDCCA5igAwIBAgICBUUwDQYJKoZIhvcNAQELBQAwRzELMAkGA1UEBhMCVVMx\r\nFjAUBgNVBAoTDUdlb1RydXN0IEluYy4xIDAeBgNVBAMTF1JhcGlkU1NMIFNIQTI1\r\nNiBDQSAtIEczMB4XDTE0MDkxNzA4NDkwMVoXDTE2MDgwMjA2MTYxNFowgZIxEzAR\r\nBgNVBAsTCkdUMzg2NTEwMTAxMTAvBgNVBAsTKFNlZSB3d3cucmFwaWRzc2wuY29t\r\nL3Jlc291cmNlcy9jcHMgKGMpMTQxLzAtBgNVBAsTJkRvbWFpbiBDb250cm9sIFZh\r\nbGlkYXRlZCAtIFJhcGlkU1NMKFIpMRcwFQYDVQQDDA4qLm5ldGJpLm5ldC5hdTCC\r\nASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALNEmMZszYz7PSTHD7/e/CcX\r\nUFefwFf3yGe272RDjWcq/xE7Uc2cHIDZKyt8cV6rifJMHYV2te+WrSCqEQTJN//A\r\nhjMFOjyLuZhyXO8AhAjmqn4HHiBAyMQldzYD4eZLq3ifLHrFuUKLoNIOZ9VBmCav\r\n4Ni7AfmNLkK2lCbaQuBdZL/XmtF0JXxxbzC1kWgQP+Dix+ZcJcF0hQr9FbpYuxhF\r\nrRzsTdMP+jnkjWkwQ6ryWSk8Jx+l9dg8vsFfau1Eqf7yLcnE5EeeuxuxNCj4PRXs\r\nFlkLJDltjR3SUoLeS34FGRTTosegYRCiHOT94XmhMYkIw/SrqCT44s88uWWOTe0C\r\nAwEAAaOCAVgwggFUMB8GA1UdIwQYMBaAFMOc8/zTRgg0u85Gf6B8W/PiCMtZMFcG\r\nCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2d2LnN5bWNkLmNvbTAm\r\nBggrBgEFBQcwAoYaaHR0cDovL2d2LnN5bWNiLmNvbS9ndi5jcnQwDgYDVR0PAQH/\r\nBAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAnBgNVHREEIDAe\r\ngg4qLm5ldGJpLm5ldC5hdYIMbmV0YmkubmV0LmF1MCsGA1UdHwQkMCIwIKAeoByG\r\nGmh0dHA6Ly9ndi5zeW1jYi5jb20vZ3YuY3JsMAwGA1UdEwEB/wQCMAAwRQYDVR0g\r\nBD4wPDA6BgpghkgBhvhFAQc2MCwwKgYIKwYBBQUHAgEWHmh0dHBzOi8vd3d3LnJh\r\ncGlkc3NsLmNvbS9sZWdhbDANBgkqhkiG9w0BAQsFAAOCAQEAICYeaSmuREWalLAq\r\nm3UhkzWTxj6Rmv/lQSjd/w34qMWThAe6d9RzduikJ6ECDHvJJqV7w8bMvWOibrpN\r\nQP92Kfr8972d5Q+22kg9kt39n68oufqIOB51FUUYCSNk7bGOSKJyGlQhfgjb+qoM\r\n1dXOfpePcf29MUGBu2n/0hTRY9E1zMpJNBaKQwNHbGslHYZq9axoqOFVGX0NL3CP\r\nMqFDyGOGG72tJnOwtA/4lJ8DvxrfEV2azdafNncsHI6/0w9oCbdbI8uW9sJBGYY6\r\nR5BIMaZAc7p3Gdf8I24u9au+QTLxrAocrJteTsooNEN+BIRPD1tOIQ0GxBNqyefZ\r\nquZxlw==\r\n-----END CERTIFICATE-----\r\nsubject=/OU=GT38651010/OU=See www.rapidssl.com/resources/cps (c)14/OU=Domain Control Validated - RapidSSL(R)/CN=*.netbi.net.au\r\nissuer=/C=US/O=GeoTrust Inc./CN=RapidSSL SHA256 CA - G3\r\n---\r\nNo client certificate CA names sent\r\nServer Temp Key: DH, 1024 bits\r\n---\r\nSSL handshake has read 3812 bytes and written 198 bytes\r\n---\r\nNew, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA\r\nServer public key is 2048 bit\r\nSecure Renegotiation IS supported\r\nCompression: NONE\r\nExpansion: NONE\r\nNo ALPN negotiated\r\nSSL-Session:\r\n    Protocol  : TLSv1\r\n    Cipher    : DHE-RSA-AES256-SHA\r\n    Session-ID: E1CC14B4082900541AAB27C3556E144BEA444DDD2EB73C550C60971D6974AF5F\r\n    Session-ID-ctx: \r\n    Master-Key: 0D6FE09C87B90A8AB9740DC6D493D323B04092DE2C19B32B841DD0535B0E2F4D3188159D81C4F90BF024B8966BDFA2FA\r\n    Key-Arg   : None\r\n    PSK identity: None\r\n    PSK identity hint: None\r\n    SRP username: None\r\n    Start Time: 1428081611\r\n    Timeout   : 300 (sec)\r\n    Verify return code: 0 (ok)\r\n---\r\n```"}}