Ubuntu

“SSL Protocol Error” in Chromium for several Google web sites after installing Ubuntu Security Updates for libnss3

Asked by Ricardo Dias Marques

Scenario: Laptop computer running Ubuntu 12.04.5 LTS (64-bit) ("Precise Pangolin")

Issue: In the Chromium web browser - "Version 37.0.2062.120 Ubuntu 12.04 (281580) (64-bit)" - after having installed the Ubuntu security Updates that were available on Feb 18, 2016, I get the following error while trying to access some Google Web sites (e.g. https://www.google.com ; https://plus.google.com/ ; https://hangouts.google.com/ ):

--------------------------------------------------------------------------------
SSL connection error

Unable to make a secure connection to the server. This may be a problem with the server, or it may be requiring a client authentication certificate that you don't have.
Error code: ERR_SSL_PROTOCOL_ERROR
Those web sites still appear correctly in the same computer, using other web browsers, namely Google Chrome - "Version 48.0.2564.109 (64-bit)" - or Mozilla Firefox - version "44.0.2"
--------------------------------------------------------------------------------

The updates installed on Feb 18, 2016 were the following:

libnss3:amd64 (3.19.2.1-0ubuntu0.12.04.2, 3.21-0ubuntu0.12.04.1)
libnss3:i386 (3.19.2.1-0ubuntu0.12.04.2, 3.21-0ubuntu0.12.04.1)
libnss3-1d:amd64 (3.19.2.1-0ubuntu0.12.04.2, 3.21-0ubuntu0.12.04.1)
"libnss3" is listed at http://packages.ubuntu.com/search?keywords=libnss3 as being the "Network Security Service libraries", so I believe it's possible that update may be related to this issue that I'm facing.

Does anyone have any information about this issue and/or tips for doing additional troubleshooting?

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
actionparsnip (andrew-woodhead666) said : 		#1

What is the output of:

lsb_release -a; uname -a; apt-cache policy chromium-browser

Thanks

Revision history for this message
Ricardo Dias Marques (ricmarques) said : 		#2

Hi actionparsnip (andrew-woodhead666),

Thanks for replying so quickly. Here's the requested output:

$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 12.04.5 LTS
Release: 12.04
Codename: precise

$ uname -a
Linux hpavilhao 3.13.0-77-generic #121~precise1-Ubuntu SMP Wed Jan 20 18:02:20 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux

$ apt-cache policy chromium-browser
chromium-browser:
  Installed: 37.0.2062.120-0ubuntu0.12.04.1~pkg917
  Candidate: 37.0.2062.120-0ubuntu0.12.04.1~pkg917
  Version table:
 *** 37.0.2062.120-0ubuntu0.12.04.1~pkg917 0
        500 http://mirrors.fe.up.pt/ubuntu/ precise-updates/universe amd64 Packages
        500 http://mirrors.fe.up.pt/ubuntu/ precise-security/universe amd64 Packages
        100 /var/lib/dpkg/status
     18.0.1025.151~r130497-0ubuntu1 0
        500 http://mirrors.fe.up.pt/ubuntu/ precise/universe amd64 Packages

Revision history for this message
ivan t (iveskins) said : 		#3

I'm having the same problem with google https with chrome
Version 37.0.2062.120 Ubuntu 12.04 (281580)

I tried clearing cookies, app data, cached images, and licence data. didn't help

$ lsb_release -a; uname -a; apt-cache policy chromium-browser
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 12.04.5 LTS
Release: 12.04
Codename: precise
Linux iveskins-2740p 3.13.0-77-generic #121~precise1-Ubuntu SMP Wed Jan 20 18:04:08 UTC 2016 i686 i686 i386 GNU/Linux
chromium-browser:
  Installed: 37.0.2062.120-0ubuntu0.12.04.1~pkg917
  Candidate: 37.0.2062.120-0ubuntu0.12.04.1~pkg917
  Version table:
 *** 37.0.2062.120-0ubuntu0.12.04.1~pkg917 0
        500 http://ubuntutym.u-toyama.ac.jp/ubuntu/ precise-updates/universe i386 Packages
        500 http://ubuntutym.u-toyama.ac.jp/ubuntu/ precise-security/universe i386 Packages
        100 /var/lib/dpkg/status
     18.0.1025.151~r130497-0ubuntu1 0
        500 http://ubuntutym.u-toyama.ac.jp/ubuntu/ precise/universe i386 Packages
iveskins@iveskins-2740p:~$

Chrome logs

19044: CONNECT_JOB
pm/ssl/www.google.com:443
Start Time: 2016-02-20 10:54:27.069

t=19096 [st= 0] +SOCKET_POOL_CONNECT_JOB [dt=239]
                  --> group_name = "pm/ssl/www.google.com:443"
t=19096 [st= 0] +SOCKET_POOL_CONNECT_JOB_CONNECT [dt=239]
t=19096 [st= 0] TCP_CLIENT_SOCKET_POOL_REQUESTED_SOCKET
                      --> host_and_port = "www.google.com:443"
t=19096 [st= 0] +SOCKET_POOL [dt=109]
t=19205 [st=109] SOCKET_POOL_BOUND_TO_CONNECT_JOB
                        --> source_dependency = 19045 (CONNECT_JOB)
t=19205 [st=109] SOCKET_POOL_BOUND_TO_SOCKET
                        --> source_dependency = 19046 (SOCKET)
t=19205 [st=109] -SOCKET_POOL
t=19335 [st=239] -SOCKET_POOL_CONNECT_JOB_CONNECT
                    --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
t=19335 [st=239] -SOCKET_POOL_CONNECT_JOB
19045: CONNECT_JOB
pm/ssl/www.google.com:443
Start Time: 2016-02-20 10:54:27.069

t=19096 [st= 0] +SOCKET_POOL_CONNECT_JOB [dt=109]
                  --> group_name = "pm/ssl/www.google.com:443"
t=19096 [st= 0] +SOCKET_POOL_CONNECT_JOB_CONNECT [dt=109]
t=19096 [st= 0] HOST_RESOLVER_IMPL [dt=9]
t=19105 [st= 9] HOST_RESOLVER_IMPL [dt=0]
t=19205 [st=109] CONNECT_JOB_SET_SOCKET
                      --> source_dependency = 19046 (SOCKET)
t=19205 [st=109] -SOCKET_POOL_CONNECT_JOB_CONNECT
t=19205 [st=109] -SOCKET_POOL_CONNECT_JOB
19046: SOCKET
pm/ssl/www.google.com:443
Start Time: 2016-02-20 10:54:27.078

t=19105 [st= 0] +SOCKET_ALIVE [dt=230]
                  --> source_dependency = 19045 (CONNECT_JOB)
t=19105 [st= 0] +TCP_CONNECT [dt=100]
                    --> address_list = ["216.58.197.4:443"]
t=19105 [st= 0] TCP_CONNECT_ATTEMPT [dt=100]
                      --> address = "216.58.197.4:443"
t=19205 [st=100] -TCP_CONNECT
                    --> source_address = "192.168.43.132:42577"
t=19205 [st=100] +SOCKET_IN_USE [dt=130]
                    --> source_dependency = 19044 (CONNECT_JOB)
t=19205 [st=100] +SSL_CONNECT [dt=130]
t=19206 [st=101] SOCKET_BYTES_SENT
                        --> byte_count = 175
t=19317 [st=212] SOCKET_BYTES_RECEIVED
                        --> byte_count = 1418
t=19322 [st=217] SOCKET_BYTES_RECEIVED
                        --> byte_count = 2329
t=19335 [st=230] SSL_HANDSHAKE_ERROR
                        --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
                        --> ssl_lib_error = -12218
t=19335 [st=230] -SSL_CONNECT
                      --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
t=19335 [st=230] -SOCKET_IN_USE
t=19335 [st=230] -SOCKET_ALIVE
19047: CONNECT_JOB
pm/ssl(max:3.2)/www.google.com:443
Start Time: 2016-02-20 10:54:27.308

t=19335 [st= 0] +SOCKET_POOL_CONNECT_JOB [dt=221]
                  --> group_name = "pm/ssl(max:3.2)/www.google.com:443"
t=19335 [st= 0] +SOCKET_POOL_CONNECT_JOB_CONNECT [dt=220]
t=19335 [st= 0] TCP_CLIENT_SOCKET_POOL_REQUESTED_SOCKET
                      --> host_and_port = "www.google.com:443"
t=19335 [st= 0] +SOCKET_POOL [dt=114]
t=19449 [st=114] SOCKET_POOL_BOUND_TO_CONNECT_JOB
                        --> source_dependency = 19048 (CONNECT_JOB)
t=19449 [st=114] SOCKET_POOL_BOUND_TO_SOCKET
                        --> source_dependency = 19049 (SOCKET)
t=19449 [st=114] -SOCKET_POOL
t=19555 [st=220] -SOCKET_POOL_CONNECT_JOB_CONNECT
                    --> net_error = -157 (ERR_SSL_INAPPROPRIATE_FALLBACK)
t=19556 [st=221] -SOCKET_POOL_CONNECT_JOB
19048: CONNECT_JOB
pm/ssl(max:3.2)/www.google.com:443
Start Time: 2016-02-20 10:54:27.308

t=19335 [st= 0] +SOCKET_POOL_CONNECT_JOB [dt=114]
                  --> group_name = "pm/ssl(max:3.2)/www.google.com:443"
t=19335 [st= 0] +SOCKET_POOL_CONNECT_JOB_CONNECT [dt=114]
t=19335 [st= 0] HOST_RESOLVER_IMPL [dt=3]
t=19338 [st= 3] HOST_RESOLVER_IMPL [dt=0]
t=19449 [st=114] CONNECT_JOB_SET_SOCKET
                      --> source_dependency = 19049 (SOCKET)
t=19449 [st=114] -SOCKET_POOL_CONNECT_JOB_CONNECT
t=19449 [st=114] -SOCKET_POOL_CONNECT_JOB
19049: SOCKET
pm/ssl(max:3.2)/www.google.com:443
Start Time: 2016-02-20 10:54:27.311

t=19338 [st= 0] +SOCKET_ALIVE [dt=218]
                  --> source_dependency = 19048 (CONNECT_JOB)
t=19338 [st= 0] +TCP_CONNECT [dt=111]
                    --> address_list = ["216.58.197.4:443"]
t=19338 [st= 0] TCP_CONNECT_ATTEMPT [dt=111]
                      --> address = "216.58.197.4:443"
t=19449 [st=111] -TCP_CONNECT
                    --> source_address = "192.168.43.132:42578"
t=19449 [st=111] +SOCKET_IN_USE [dt=107]
                    --> source_dependency = 19047 (CONNECT_JOB)
t=19449 [st=111] +SSL_CONNECT [dt=106]
t=19450 [st=112] SOCKET_BYTES_SENT
                        --> byte_count = 143
t=19555 [st=217] SOCKET_BYTES_RECEIVED
                        --> byte_count = 7
t=19555 [st=217] SSL_HANDSHAKE_ERROR
                        --> net_error = -157 (ERR_SSL_INAPPROPRIATE_FALLBACK)
                        --> ssl_lib_error = -12156
t=19555 [st=217] -SSL_CONNECT
                      --> net_error = -157 (ERR_SSL_INAPPROPRIATE_FALLBACK)
t=19556 [st=218] -SOCKET_IN_USE
t=19556 [st=218] -SOCKET_ALIVE
19050: HTTP_STREAM_JOB
https://www.google.co.nz/
Start Time: 2016-02-20 10:55:17.980

t=70007 [st=0] +HTTP_STREAM_JOB [dt=3]
                --> original_url = "https://www.google.co.nz/"
                --> priority = "HIGHEST"
                --> url = "https://www.google.co.nz/"
t=70007 [st=0] +PROXY_SERVICE [dt=0]
t=70007 [st=0] PROXY_SERVICE_RESOLVED_PROXY_LIST
                    --> pac_string = "DIRECT"
t=70007 [st=0] -PROXY_SERVICE
t=70007 [st=0] HOST_RESOLVER_IMPL [dt=1]
                  --> source_dependency = 19051 (HOST_RESOLVER_IMPL_REQUEST)
t=70008 [st=1] SOCKET_POOL_CONNECTING_N_SOCKETS [dt=1]
                  --> num_sockets = 1
t=70010 [st=3] -HTTP_STREAM_JOB
19051: HOST_RESOLVER_IMPL_REQUEST
www.google.co.nz:443
Start Time: 2016-02-20 10:55:17.980

t=70007 [st=0] +HOST_RESOLVER_IMPL_REQUEST [dt=1]
                --> address_family = 0
                --> allow_cached_response = true
                --> host = "www.google.co.nz:443"
                --> is_speculative = false
                --> source_dependency = 19050 (HTTP_STREAM_JOB)
t=70008 [st=1] HOST_RESOLVER_IMPL_CACHE_HIT
t=70008 [st=1] -HOST_RESOLVER_IMPL_REQUEST
19052: IPV6_REACHABILITY_CHECK
Start Time: 2016-02-20 10:55:17.980

t=70007 [st=0] IPV6_REACHABILITY_CHECK [dt=0]
                --> source_dependency = 19051 (HOST_RESOLVER_IMPL_REQUEST)
19053: UDP_SOCKET
[2001:4860:4860::8888]:53
Start Time: 2016-02-20 10:55:17.980

t=70007 [st=0] +SOCKET_ALIVE [dt=0]
                --> source_dependency = 19052 (IPV6_REACHABILITY_CHECK)
t=70007 [st=0] +UDP_CONNECT [dt=0]
                  --> address = "[2001:4860:4860::8888]:53"
t=70007 [st=0] -UDP_CONNECT
                  --> net_error = -109 (ERR_ADDRESS_UNREACHABLE)
t=70007 [st=0] -SOCKET_ALIVE
19054: CONNECT_JOB
ssl/www.google.co.nz:443
Start Time: 2016-02-20 10:55:17.981

t=70008 [st= 0] +SOCKET_POOL_CONNECT_JOB [dt=242]
                  --> group_name = "ssl/www.google.co.nz:443"
t=70008 [st= 0] +SOCKET_POOL_CONNECT_JOB_CONNECT [dt=242]
t=70008 [st= 0] TCP_CLIENT_SOCKET_POOL_REQUESTED_SOCKET
                      --> host_and_port = "www.google.co.nz:443"
t=70008 [st= 0] +SOCKET_POOL [dt=95]
t=70103 [st= 95] SOCKET_POOL_BOUND_TO_CONNECT_JOB
                        --> source_dependency = 19055 (CONNECT_JOB)
t=70103 [st= 95] SOCKET_POOL_BOUND_TO_SOCKET
                        --> source_dependency = 19059 (SOCKET)
t=70103 [st= 95] -SOCKET_POOL
t=70250 [st=242] -SOCKET_POOL_CONNECT_JOB_CONNECT
                    --> net_error = -107 (ERR_SSL_PROTOCOL_ERROR)
t=70250 [st=242] -SOCKET_POOL_CONNECT_JOB
19055: CONNECT_JOB
ssl/www.google.co.nz:443
Start Time: 2016-02-20 10:55:17.981

t=70008 [st= 0] +SOCKET_POOL_CONNECT_JOB [dt=95]
                 --> group_name = "ssl/www.google.co.nz:443"
t=70008 [st= 0] +SOCKET_POOL_CONNECT_JOB_CONNECT [dt=95]
t=70008 [st= 0] HOST_RESOLVER_IMPL [dt=1]
                     --> source_dependency = 19056 (HOST_RESOLVER_IMPL_REQUEST)
t=70103 [st=95] CONNECT_JOB_SET_SOCKET
                     --> source_dependency = 19059 (SOCKET)
t=70103 [st=95] -SOCKET_POOL_CONNECT_JOB_CONNECT
t=70103 [st=95] -SOCKET_POOL_CONNECT_JOB
19056: HOST_RESOLVER_IMPL_REQUEST
www.google.co.nz:443
Start Time: 2016-02-20 10:55:17.981

t=70008 [st=0] +HOST_RESOLVER_IMPL_REQUEST [dt=1]
                --> address_family = 0
                --> allow_cached_response = true
                --> host = "www.google.co.nz:443"
                --> is_speculative = false
                --> source_dependency = 19055 (CONNECT_JOB)
t=70009 [st=1] HOST_RESOLVER_IMPL_CACHE_HIT
t=70009 [st=1] -HOST_RESOLVER_IMPL_REQUEST

Revision history for this message
ivan t (iveskins) said : 		#4

Start-Date: 2016-02-19 13:05:34
Commandline: aptdaemon role='role-commit-packages' sender=':1.83'
Upgrade: libc-bin:i386 (2.15-0ubuntu10.12, 2.15-0ubuntu10.13), libnss3:i386 (3.19.2.1-0ubuntu0.12.04.2, 3.21-0ubuntu0.12.04.1), smbclient:i386 (3.6.3-2ubuntu2.13, 3.6.3-2ubuntu2.14), libreoffice-calc:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libreoffice-gnome:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libreoffice-help-es:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libreoffice-help-ja:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libreoffice-help-ru:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libreoffice-emailmerge:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libreoffice-core:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libreoffice-writer:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libsmbclient:i386 (3.6.3-2ubuntu2.13, 3.6.3-2ubuntu2.14), libreoffice-draw:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libreoffice-l10n-en-gb:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libreoffice-l10n-en-za:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libreoffice-help-en-gb:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libreoffice-base-core:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), samba-common-bin:i386 (3.6.3-2ubuntu2.13, 3.6.3-2ubuntu2.14), uno-libs3:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libreoffice-help-en-us:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), python-uno:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libpam-winbind:i386 (3.6.3-2ubuntu2.13, 3.6.3-2ubuntu2.14), libreoffice-style-human:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libreoffice-l10n-es:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libreoffice-l10n-ja:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libreoffice-l10n-ru:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), pepflashplugin-installer:i386 (20.0.0.306~cr48.0.2564.109-1-0skunk0, 20.0.0.306~cr48.0.2564.116-1-0skunk0), multiarch-support:i386 (2.15-0ubuntu10.12, 2.15-0ubuntu10.13), samba:i386 (3.6.3-2ubuntu2.13, 3.6.3-2ubuntu2.14), libreoffice-impress:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libwbclient0:i386 (3.6.3-2ubuntu2.13, 3.6.3-2ubuntu2.14), ure:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), fonts-opensymbol:i386 (102.2+LibO3.5.7-0ubuntu9, 102.2+LibO3.5.7-0ubuntu10), libreoffice-java-common:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libreoffice-math:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), ntpdate:i386 (4.2.6.p3+dfsg-1ubuntu3.8, 4.2.6.p3+dfsg-1ubuntu3.9), samba-common:i386 (3.6.3-2ubuntu2.13, 3.6.3-2ubuntu2.14), libreoffice-common:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), winbind:i386 (3.6.3-2ubuntu2.13, 3.6.3-2ubuntu2.14), libpam-smbpass:i386 (3.6.3-2ubuntu2.13, 3.6.3-2ubuntu2.14), libnss3-1d:i386 (3.19.2.1-0ubuntu0.12.04.2, 3.21-0ubuntu0.12.04.1), libreoffice-style-tango:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10), libreoffice-gtk:i386 (3.5.7-0ubuntu9, 3.5.7-0ubuntu10)
End-Date: 2016-02-19 13:07:12

Revision history for this message
actionparsnip (andrew-woodhead666) said : 		#5

All I can suggest is report a bug. Include the 2 logs you added in your last update.

Revision history for this message
Ricardo Dias Marques (ricmarques) said : 		#6

Hi actionparsnip (andrew-woodhead666),

Thanks for your feedback. I created a bug report as suggested:

Bug #1547762 ""SSL Protocol Error” in Chromium for several Googl... : Bugs : chromium-browser package : Ubuntu
https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1547762

Revision history for this message
Nicolas DS (zyphos) said : 		#7

To retrieve the old versions of libnss3 and libnss3-d1 (Chromium works with them):

i386
http://launchpadlibrarian.net/233346598/libnss3_3.19.2.1-0ubuntu0.12.04.2_i386.deb
http://launchpadlibrarian.net/233346593/libnss3-1d_3.19.2.1-0ubuntu0.12.04.2_i386.deb

amd64
http://launchpadlibrarian.net/233346368/libnss3_3.19.2.1-0ubuntu0.12.04.2_amd64.deb
http://launchpadlibrarian.net/236292255/libnss3-1d_3.21-0ubuntu0.12.04.1_amd64.deb

Found through:
https://launchpad.net/ubuntu/precise/i386/libnss3

Can you help with this problem?

Provide an answer of your own, or ask Ricardo Dias Marques for more information if necessary.

To post a message you must log in.