Ubuntu One File Sync problem - ssl handshake error

Question

Ubuntu One file sync isn't working for me for 11.04. It is continuously attempting to sync a small file with no luck. From syncdaemon.log:

2011-08-25 21:51:14,263 - ubuntuone.SyncDaemon.Main - NOTE - Local rescan finished!
2011-08-25 21:51:14,263 - ubuntuone.SyncDaemon.Main - INFO - hash queue empty. We are ready!
2011-08-25 21:51:14,288 - ubuntuone.SyncDaemon.ActionQueue - INFO - Connection started to host fs-1.ubuntuone.com, port 443.
2011-08-25 21:51:14,473 - ubuntuone.SyncDaemon.ActionQueue - INFO - Connection made.
2011-08-25 21:51:14,474 - ubuntuone.SyncDaemon.StorageClient - INFO - Connection made.
2011-08-25 21:51:35,639 - ubuntuone.SyncDaemon.StorageClient - INFO - Connection lost, reason: [Failure instance: Traceback (failure with no frames): <class 'OpenSSL.SSL.Error'>: [('SSL routines', 'SSL23_READ', 'ssl handshake failure')]
].
2011-08-25 21:51:35,639 - ubuntuone.SyncDaemon.ActionQueue - WARNING - Client mismatch while processing the request 'protocol_version', client (<ubuntuone.syncdaemon.action_queue.ActionQueueProtocol instance at 0x29308c0>) is not self.client (None).
2011-08-25 21:51:35,640 - ubuntuone.SyncDaemon.ActionQueue - WARNING - Connection lost: [('SSL routines', 'SSL23_READ', 'ssl handshake failure')]
2011-08-25 21:51:47,442 - ubuntuone.SyncDaemon.DBus - INFO - connect was requested. Are we autoconnecting? False.
2011-08-25 21:51:48,177 - ubuntuone.SyncDaemon.DBus - INFO - 'CredentialsFound': callbacking with credentials.
2011-08-25 21:51:48,178 - ubuntuone.SyncDaemon.DBus - INFO - connect: credential request was successful, pushing SYS_USER_CONNECT.
2011-08-25 21:51:48,200 - ubuntuone.SyncDaemon.ActionQueue - INFO - Connection started to host fs-1.ubuntuone.com, port 443.
2011-08-25 21:51:48,382 - ubuntuone.SyncDaemon.ActionQueue - INFO - Connection made.
2011-08-25 21:51:48,382 - ubuntuone.SyncDaemon.StorageClient - INFO - Connection made.
2011-08-25 21:52:09,547 - ubuntuone.SyncDaemon.StorageClient - INFO - Connection lost, reason: [Failure instance: Traceback (failure with no frames): <class 'OpenSSL.SSL.Error'>: [('SSL routines', 'SSL3_READ_BYTES', 'ssl handshake failure')]
].
2011-08-25 21:52:09,730 - ubuntuone.SyncDaemon.HQ - INFO - HashQueue: _hasher stopped
2011-08-25 21:52:09,730 - ubuntuone.SyncDaemon.tritcask - INFO - shutting down...
2011-08-25 21:52:09,740 - ubuntuone.SyncDaemon.DBus - INFO - Shuttingdown DBusInterface!
2011-08-25 21:52:09,747 - ubuntuone.SyncDaemon.ActionQueue - INFO - The request 'protocol_version' failed with the error: [('SSL routines', 'SSL3_READ_BYTES', 'ssl handshake failure')] and was handled with the event: SYS_UNKNOWN_ERROR
2011-08-25 21:52:09,748 - ubuntuone.SyncDaemon.ActionQueue - WARNING - Connection lost: [('SSL routines', 'SSL3_READ_BYTES', 'ssl handshake failure')]

Answer 1

I have the same problem, heres a trace for the ssl connection:

~$ openssl s_client -showcerts -connect fs-2.ubuntuone.com:443 -debug
CONNECTED(00000003)
write to 0x116ffa0 [0x11700b0] (95 bytes => 95 (0x5F))
0000 - 16 03 01 00 5a 01 00 00-56 03 01 4e 57 5b 56 da   ....Z...V..NW[V.
0010 - b1 33 0e 37 a0 ed 4f 89-fe 3a ed 69 fa 09 32 c3   .3.7..O..:.i..2.
0020 - 81 29 e6 aa 31 77 a5 85-b8 25 2e 00 00 28 00 39   .)..1w...%...(.9
0030 - 00 38 00 35 00 16 00 13-00 0a 00 33 00 32 00 2f   .8.5.......3.2./
0040 - 00 05 00 04 00 15 00 12-00 09 00 14 00 11 00 08   ................
0050 - 00 06 00 03 00 ff 02 01-00 00 04 00 23            ............#
005f - 
read from 0x116ffa0 [0x1175610] (7 bytes => 7 (0x7))
0000 - 16 03 01 00 35 02                                 ....5.
0007 - 
read from 0x116ffa0 [0x1175617] (51 bytes => 51 (0x33))
0000 - 00 31 03 01 4e 57 5b 6b-9f 07 93 6c b6 f3 78 9d   .1..NW[k...l..x.
0010 - a5 94 7c f2 3c 89 1b 71-a8 52 9e da 5a 8b de 0c   ..|.
read from 0x116ffa0 [0x1175610] (5 bytes => 5 (0x5))
0000 - 16 03 01 05 7f                                    .....
read from 0x116ffa0 [0x1175615] (1407 bytes => 1407 (0x57F))
0000 - 0b 00 05 7b 00 05 78 00-05 75 30 82 05 71 30 82   ...{..x..u0..q0.
0010 - 04 59 a0 03 02 01 02 02-07 04 8d e0 ba 65 bc 2d   .Y...........e.-
0020 - 30 0d 06 09 2a 86 48 86-f7 0d 01 01 05 05 00 30   0...*.H........0
0030 - 81 ca 31 0b 30 09 06 03-55 04 06 13 02 55 53 31   ..1.0...U....US1
0040 - 10 30 0e 06 03 55 04 08-13 07 41 72 69 7a 6f 6e   .0...U....Arizon
0050 - 61 31 13 30 11 06 03 55-04 07 13 0a 53 63 6f 74   a1.0...U....Scot
0060 - 74 73 64 61 6c 65 31 1a-30 18 06 03 55 04 0a 13   tsdale1.0...U...
0070 - 11 47 6f 44 61 64 64 79-2e 63 6f 6d 2c 20 49 6e   .GoDaddy.com, In
0080 - 63 2e 31 33 30 31 06 03-55 04 0b 13 2a 68 74 74   c.1301..U...*htt
0090 - 70 3a 2f 2f 63 65 72 74-69 66 69 63 61 74 65 73   p://certificates
00a0 - 2e 67 6f 64 61 64 64 79-2e 63 6f 6d 2f 72 65 70   .godaddy.com/rep
00b0 - 6f 73 69 74 6f 72 79 31-30 30 2e 06 03 55 04 03   ository100...U..
00c0 - 13 27 47 6f 20 44 61 64-64 79 20 53 65 63 75 72   .'Go Daddy Secur
00d0 - 65 20 43 65 72 74 69 66-69 63 61 74 69 6f 6e 20   e Certification 
00e0 - 41 75 74 68 6f 72 69 74-79 31 11 30 0f 06 03 55   Authority1.0...U
00f0 - 04 05 13 08 30 37 39 36-39 32 38 37 30 1e 17 0d   ....079692870...
0100 - 31 30 30 39 30 31 31 38-33 39 35 34 5a 17 0d 31   100901183954Z..1
0110 - 32 30 39 30 31 31 38 33-39 35 34 5a 30 5f 31 1c   20901183954Z0_1.
0120 - 30 1a 06 03 55 04 0a 13-13 66 73 2d 31 2e 6f 6e   0...U....fs-1.on
0130 - 65 2e 75 62 75 6e 74 75-2e 63 6f 6d 31 21 30 1f   e.ubuntu.com1!0.
0140 - 06 03 55 04 0b 13 18 44-6f 6d 61 69 6e 20 43 6f   ..U....Domain Co
0150 - 6e 74 72 6f 6c 20 56 61-6c 69 64 61 74 65 64 31   ntrol Validated1
0160 - 1c 30 1a 06 03 55 04 03-13 13 66 73 2d 31 2e 6f   .0...U....fs-1.o
0170 - 6e 65 2e 75 62 75 6e 74-75 2e 63 6f 6d 30 82 01   ne.ubuntu.com0..
0180 - 22 30 0d 06 09 2a 86 48-86 f7 0d 01 01 01 05 00   "0...*.H........
0190 - 03 82 01 0f 00 30 82 01-0a 02 82 01 01 00 e3 3e   .....0.........>
01a0 - d9 27 c8 d5 02 5b 8a 9c-4c fd 71 66 e6 15 79 b6   .'...[..L.qf..y.
01b0 - 64 7d 2a 2c ea 40 12 0a-ec 03 10 87 c4 9d 36 74   d}*,.@........6t
01c0 - c4 38 b1 ff d8 0a 10 53-e5 fa 07 34 3b 43 85 51   .8.....S...4;C.Q
01d0 - 99 a8 fe 12 6a 53 f0 35-5f 15 d2 94 42 ac fb 53   ....jS.5_...B..S
01e0 - c1 3d b7 91 01 ac 97 34-75 47 7c 70 cc d5 2a 18   .=.....4uG|p..*.
01f0 - 61 a8 4c e0 35 05 49 3c-e3 6c e1 01 06 d9 fc c7   a.L.5.Ihttp://certi
03c0 - 66 69 63 61 74 65 73 2e-67 6f 64 61 64 64 79 2e   ficates.godaddy.
03d0 - 63 6f 6d 2f 72 65 70 6f-73 69 74 6f 72 79 2f 67   com/repository/g
03e0 - 64 5f 69 6e 74 65 72 6d-65 64 69 61 74 65 2e 63   d_intermediate.c
03f0 - 72 74 30 1f 06 03 55 1d-23 04 18 30 16 80 14 fd   rt0...U.#..0....
0400 - ac 61 32 93 6c 45 d6 e2-ee 85 5f 9a ba e7 76 99   .a2.lE...._...v.
0410 - 68 cc e7 30 37 06 03 55-1d 11 04 30 30 2e 82 13   h..07..U...00...
0420 - 66 73 2d 31 2e 6f 6e 65-2e 75 62 75 6e 74 75 2e   fs-1.one.ubuntu.
0430 - 63 6f 6d 82 17 77 77 77-2e 66 73 2d 31 2e 6f 6e   com..www.fs-1.on
0440 - 65 2e 75 62 75 6e 74 75-2e 63 6f 6d 30 1d 06 03   e.ubuntu.com0...
0450 - 55 1d 0e 04 16 04 14 65-9d e9 87 88 25 7e f3 e3   U......e....%~..
0460 - 57 94 46 5d 1f 7a df 0e-be 7d ef 30 0d 06 09 2a   W.F].z...}.0...*
0470 - 86 48 86 f7 0d 01 01 05-05 00 03 82 01 01 00 a9   .H..............
0480 - aa f1 be ab b3 ca f4 67-09 03 8c a3 41 af a3 7e   .......g....A..~
0490 - dd f2 d8 45 e3 96 6b 4e-14 84 4b ad 58 dd bd b2   ...E..kN..K.X...
04a0 - 18 98 44 ce c9 f2 14 f0-a0 18 d8 66 cd 22 d1 0f   ..D........f."..
04b0 - 55 ea 5b db 72 3a 78 ad-1a d2 39 40 26 a4 44 f0   U.[.r:x...9@&.D.
04c0 - 7d 71 c5 bb b0 db e4 fc-39 86 8f 2c 3d 9a 2a 0a   }q......9..,=.*.
04d0 - b8 56 ee fb 3e 7b ea 76-1f 24 f5 7e 1a cf 39 b7   .V..>{.v.$.~..9.
04e0 - d9 9c e7 99 04 e2 01 8f-4a e2 52 a0 c7 6e 34 e3   ........J.R..n4.
04f0 - 54 78 7d 8c 83 e1 3d 63-8d ff 1b f6 f1 ac 0a e5   Tx}...=c........
0500 - 9a 79 93 2d 8c 40 85 49-fe 26 bd f8 6e c8 e9 1a   .y.-.@.I.&..n...
0510 - 60 4b ad 45 c7 a2 26 a7-a0 0a 3f 2e 64 b0 ce 57   `K.E..&...?.d..W
0520 - 56 be e6 5d ce 5e cd 7b-98 66 cf bf 66 4a a2 52   V..].^.{.f..fJ.R
0530 - b2 9d 8c 13 af 32 a7 d3-dc e5 cd 33 05 04 12 7e   .....2.....3...~
0540 - 39 0c f6 a8 a2 92 e8 95-31 f5 0a 34 5d 2c 77 88   9.......1..4],w.
0550 - b8 20 36 4c 98 e7 87 82-94 f2 4c 69 23 8c df 5d   . 6L......Li#..]
0560 - d4 3f 46 ef 34 40 13 85-72 88 71 da 1c 91 e8 8c   .?F.4@..r.q.....
0570 - 09 aa 81 5b a0 87 51 56-0b 4b a6 83 dd a0 a6      ...[..QV.K.....
depth=0 /O=fs-1.one.ubuntu.com/OU=Domain Control Validated/CN=fs-1.one.ubuntu.com
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 /O=fs-1.one.ubuntu.com/OU=Domain Control Validated/CN=fs-1.one.ubuntu.com
verify error:num=27:certificate not trusted
verify return:1
depth=0 /O=fs-1.one.ubuntu.com/OU=Domain Control Validated/CN=fs-1.one.ubuntu.com
verify error:num=21:unable to verify the first certificate
verify return:1
read from 0x116ffa0 [0x1175610] (5 bytes => 5 (0x5))
0000 - 16 03 01 00 04                                    .....
read from 0x116ffa0 [0x1175615] (4 bytes => 4 (0x4))
0000 - 0e                                                .
0004 - 
write to 0x116ffa0 [0x117f8e0] (267 bytes => 267 (0x10B))
0000 - 16 03 01 01 06 10 00 01-02 01 00 25 8b ed 4f af   ...........%..O.
0010 - ba 95 29 a4 0c eb 95 bd-18 9b 8b d2 d0 e4 70 e0   ..)...........p.
0020 - b0 f7 47 51 78 eb 35 2d-f6 df d5 72 b5 bd 7a 4c   ..GQx.5-...r..zL
0030 - 75 7c 09 b6 c4 ac 96 79-8d a8 21 d8 12 36 23 79   u|.....y..!..6#y
0040 - 1d 99 44 28 6e 2a 20 ad-9b b3 2e 1a 72 13 6e be   ..D(n* .....r.n.
0050 - 64 7d d7 ef bd 9e a9 af-f3 ad c8 c1 5b b9 6f 6d   d}..........[.om
0060 - ac dd cc 14 35 f1 ec fe-ff 66 f6 87 b5 e5 9e de   ....5....f......
0070 - 52 78 6b de 3d c5 82 c1-9f 81 a6 a0 3a e1 7d c5   Rxk.=.......:.}.
0080 - f1 8a 21 1a e5 fe e9 ed-1a 49 a6 40 5d 56 25 6a   ..!......I.@]V%j
0090 - 77 df 62 55 3d 7b 02 cc-de 59 1e 8e ca 44 fc 0b   w.bU={...Y...D..
00a0 - 37 99 c9 b2 d4 43 0c a4-6c de 7f 9c e5 bf 28 ca   7....C..l.....(.
00b0 - 31 43 78 51 8d f0 bb b2-6c be c7 0c 58 4e 9e 7f   1CxQ....l...XN..
00c0 - f7 a8 3e 58 54 e8 11 2b-68 01 e6 18 bd 39 64 26   ..>XT..+h....9d&
00d0 - 58 4c 72 16 59 e2 2b 4f-12 cb f8 a1 82 e8 d0 35   XLr.Y.+O.......5
00e0 - 41 65 bd 7b 76 10 18 c8-05 ec 7a 23 d9 32 21 fc   Ae.{v.....z#.2!.
00f0 - 46 92 08 c1 f7 9e 57 52-57 a3 9c ba 00 07 69 7d   F.....WRW.....i}
0100 - 77 17 68 80 c7 73 e7 23-73 23 9f                  w.h..s.#s#.
write to 0x116ffa0 [0x117f8e0] (6 bytes => 6 (0x6))
0000 - 14 03 01 00 01 01                                 ......
write to 0x116ffa0 [0x117f8e0] (53 bytes => 53 (0x35))
0000 - 16 03 01 00 30 a4 e7 fb-de 2b f7 55 c3 bf 15 14   ....0....+.U....
0010 - 94 e8 9f e2 ea 86 3e f0-28 42 f3 93 d7 b1 de e9   ......>.(B......
0020 - b8 6a e5 1e 67 a0 0e b8-8d 9c 33 07 87 6b 8c 76   .j..g.....3..k.v
0030 - 40 04 fe 70 1d                                    @..p.
read from 0x116ffa0 [0x1175610] (5 bytes => 0 (0x0))
15862:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

yesterday it was going just fine.

You can see that the CN is not the correct one (fs-1.one.ubuntu.com is not fs-2.ubuntuone.com).

It also takes nearly 22 seconds to get the certificate from the server:

~$ openssl s_client -connect fs-2.ubuntuone.com:443
CONNECTED(00000003)
depth=0 /O=fs-1.one.ubuntu.com/OU=Domain Control Validated/CN=fs-1.one.ubuntu.com
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 /O=fs-1.one.ubuntu.com/OU=Domain Control Validated/CN=fs-1.one.ubuntu.com
verify error:num=27:certificate not trusted
verify return:1
depth=0 /O=fs-1.one.ubuntu.com/OU=Domain Control Validated/CN=fs-1.one.ubuntu.com
verify error:num=21:unable to verify the first certificate
verify return:1
15907:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:
cascara@zeus:~$ time openssl s_client -connect fs-2.ubuntuone.com:443
CONNECTED(00000003)
depth=0 /O=fs-1.one.ubuntu.com/OU=Domain Control Validated/CN=fs-1.one.ubuntu.com
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 /O=fs-1.one.ubuntu.com/OU=Domain Control Validated/CN=fs-1.one.ubuntu.com
verify error:num=27:certificate not trusted
verify return:1
depth=0 /O=fs-1.one.ubuntu.com/OU=Domain Control Validated/CN=fs-1.one.ubuntu.com
verify error:num=21:unable to verify the first certificate
verify return:1
15913:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

real    0m21.257s
user    0m0.000s
sys 0m0.000s

Answer 2

First, Sorry for the inconvenience. We are experiencing a temporary disruption in service. Our engineers are working to resolve this issue as soon as possible.