Re: Long delay with Crypt::SSLeay and LWP

[Anonymous Monk]

Try Net::SSLeay on for size :)

#!/usr/bin/perl --
use LWP::Simple ;
use IO::Socket::SSL qw(debug3);
get( q{https://pilot-payflowpro.paypal.com/} );
__END__
DEBUG: .../IO/Socket/SSL.pm:1567: new ctx 18240320

DEBUG: .../IO/Socket/SSL.pm:334: socket not yet connected

DEBUG: .../IO/Socket/SSL.pm:336: socket connected

DEBUG: .../IO/Socket/SSL.pm:354: ssl handshake not started

DEBUG: .../IO/Socket/SSL.pm:1555: ok=1 cert=18273264

DEBUG: .../IO/Socket/SSL.pm:1555: ok=1 cert=18997536

DEBUG: .../IO/Socket/SSL.pm:1555: ok=1 cert=18245888

DEBUG: .../IO/Socket/SSL.pm:1170: scheme=www cert=18245888

DEBUG: .../IO/Socket/SSL.pm:1177: identity=pilot-payflowpro.paypal.com
+ cn=pilot-payflowpro.paypal.com alt=2 pilot-payflowpro.paypal.com

DEBUG: .../IO/Socket/SSL.pm:414: Net::SSLeay::connect -> 1

DEBUG: .../IO/Socket/SSL.pm:469: ssl handshake done

DEBUG: .../IO/Socket/SSL.pm:1604: free ctx 18240320 open=18240320

DEBUG: .../IO/Socket/SSL.pm:1609: free ctx 18240320 callback

DEBUG: .../IO/Socket/SSL.pm:1612: OK free ctx 18240320

[waldo22]

Thanks for the tip. That produced slightly more helpful output. Does this mean anything to you?

DEBUG: .../IO/Socket/SSL.pm:196: set domain to 2
DEBUG: .../IO/Socket/SSL.pm:1622: new ctx 33610976
DEBUG: .../IO/Socket/SSL.pm:339: socket not yet connected
DEBUG: .../IO/Socket/SSL.pm:341: socket connected
DEBUG: .../IO/Socket/SSL.pm:359: ssl handshake not started
(long pause again - at least 30 sec.)
DEBUG: .../IO/Socket/SSL.pm:422: Net::SSLeay::connect -> -1
DEBUG: .../IO/Socket/SSL.pm:1299: SSL connect attempt failed with unkn
+own error error:00000000:lib(0):func(0):reason(0)

DEBUG: .../IO/Socket/SSL.pm:428: fatal SSL error: SSL connect attempt 
+failed with unknown error error:00000000:lib(0):func(0):reason(0)
DEBUG: .../IO/Socket/SSL.pm:1299: IO::Socket::INET6 configuration fail
+ed error:00000000:lib(0):func(0):reason(0)

DEBUG: .../IO/Socket/SSL.pm:1659: free ctx 33610976 open=33610976
DEBUG: .../IO/Socket/SSL.pm:1667: OK free ctx 33610976

[Anonymous Monk]

Does this mean anything to you?

:) Not particularly, though it hints to me the problem likely isn't perl specific -- you can probably confirm this hunch by running openssl ... see Debugging SSL communications

[waldo22]

Thanks for the great tip about debugging SSL.

You're correct, this is not a Perl problem.

Same delays when running the s_client test directly from OpenSSL.

The same test connects just fine to the Authorize.net gateway, so I'm taking this up with the Payflow development support folks now.

I'll report back just in case someone else has this problem, but as of now, it looks like it's related to certificate validation, or to Payflow's servers, or something

It's a shame the secular community isn't this helpful ;)