Cannot mount with SSL

Help
gooboo
2006-03-15
2013-04-16
  • gooboo
    gooboo
    2006-03-15

    Hi:

    I have compiled davfs2 with the --with-ssl flag. Everything seems to build fine, but when I try to mount as root (e.g. mount.davfs https://dav.com/dav /mnt/dav), I get the following after I supply my credentials:

    WebDAV Enabled??
    WebDAV Enabled??
    mount.davfs: Could not mount /dev/davfs0 on /mnt/dav

    On other occassions, I get the following error instead (also as root):

    Could not contact server:
    Could not read status line: SSL error: decryption failed or bad record mac
    mount.davfs: Could not connect to https://bright1.com/dav.

    Any ideas?

    Thanx,
    GB

     
    • gooboo
      gooboo
      2006-03-16

      I confirmed that I am using libssl 0.9.8a-7 and libneon 0.25.5.dfsg-2.

      Cheers,
      GB

       
    • Werner Baumann
      Werner Baumann
      2006-03-16

      The compile option '--with-ssl' has no real function. It is inserted by the macros that come with neon. But we don't compile the neon libraries, but use the library of your system instead.
      So whether SSL is enabled depends on libneon of your system.
      To see whether ssl is supported you may issue the command
      'neon-config --suport ssl'
      and
      'echo $?'
      immediatly after this.
      A value of '0' indicates ssl support.

      But most propably neon supports ssl. There seems to be some misunderstanding between neon and your server.

      Can you acces the webdav server with an ordinary browser, using SSL?

      Is your server really WebDAV enabled. davfs2 prints the message "WebDAV Enabled?" when it gets from the server HTTP-response "405 Method Not Allowed".

      Werner

       
      • gooboo
        gooboo
        2006-03-16

        Werner:

        Neon does support SSL.

        > Can you acces the webdav server with an ordinary browser, using SSL?

        Yes, with firefox (and also DAVExplorer).

        > Is your server really WebDAV enabled. davfs2 prints the message "WebDAV Enabled?" when it gets from the server HTTP-response "405 Method Not Allowed".

        Yes. I am able to browse just fine with Internet Explorer and other tools.

        I have also installed cadaver, which also uses neon. It also reports similar types of errors, but they are intermittent. I just retry a command and it works. So something to do with timeouts?

        Thanx,
        GB

         
      • newfun
        newfun
        2007-05-08

        Hello dear friends,

        I am trying to compile neon with ssl support om a rh9 machine to use davfs2. Here's what I did:

        wget http://www.webdav.org/neon/neon-0.26.3.tar.gz
        tar -zxvf neon-0.26.3.tar.gz
        cd neon-0.26.3.tar.gz
        ./configure --with-ssl
        make
        make install

        I the proceeded to install davfs2-1.2.1 and tried to login to a webdav site, the result was:
        /sbin/mount.davfs: neon library does not support TLS/SSL

        And a forum entry suggested to check neon in the following way:

        "neon-config --support ssl
        and
        'echo $?'
        immediatly after this.
        A value of '0' indicates ssl support. "

        I got a value of '1' indicating that ssl support is not on. My question is this: Can anyone point me in the right direction how I can get ssl support going?

        Any help greatly appreciated!

         
    • Werner Baumann
      Werner Baumann
      2006-03-17

      Hello GB,

      it would be nice to analyze the HTTP traffic, but with SSL this is not possible. Can you test, if the problem occurs when using plain HTTP, and send me a log of the traffic?

      If the problem only shows with SSL or plain HTTP is not possible:
      Please configure davfs2 with option '--with-debug' (but without --with-ssl, it's useless). There will be lots of debug messages from mount.davfs in one of your log files, you might send me. But be warned: Your username and password will be in the logs at startup of davfs2. You will have to remove them.

      Greetings
      Werner

       
    • Werner Baumann
      Werner Baumann
      2007-05-08

      Please first run

      ./configure --help

      to see all the configuration options.

      It should work with

      ./configure --with-ssl --enable-shared

      I advice to use the --enable-shared option, as shared libraries are nowadays standard on GNU/Linux systems and I only tested davfs2 with shared libraries.

      You will have to watch the messages from configure. There is a summary at the end. It should look like this:

        Install prefix:  /usr/local
        Compiler:        gcc
        XML Parser:      expat
        SSL library:     SSL support enabled, using OpenSSL (0.9.7 or later)
        zlib support:    zlib support enabled, using -lz
        Build libraries: Shared=yes, Static=yes

      If the summary shows any problems (e.g. no SSL support), you will have to examine the rest of the messages.

      If the summary is ok, you may do make and make install.

      If there is another version of neon on your system, make sure davfs2 uses the correct one. Also be sure you call the neon-config from *your* library. If the install prefix is /usr/local, it should be /usr/local/bin/neon-config.

      When configuring davfs2, please watch the messages of configure too. There is a summary that should look like

        Install Prefix:            /usr/local
        Compiler:                  gcc
        Large File Support:        yes
        Neon Library:              library in /usr/local (0.26.1)
                                   SSL is supported by neon
        National Language Support: libc

      If it does not use the neon library you installed, you may need to use option

      --with-neon=/usr/local

      If the configure scripts show any problem you can not resolve please send the complete output of the configure scripts together with the command line.

      Cheers
      Werner