Broken Account Details (Preferences etc)

GarageSale
1

I started to receive issues connecting to eBay… after being patient, and deciding the problem wasn’t with eBay went searching… and found that GarageSale and my account details is broken!

I upgraded from 6.7 > 6.9.3 to no avail…

GarageSale is unable to connect to eBay at all for any info (getting messages/listing auctions). I can’t refresh my token, I can’t even delete my eBay account from GarageSale preferences (the minus sign is greyed out).
If I try and add another account, it comes up with the “acquire access token” window…

2

Hi Barclay2k,

can you describe why you can’t refresh your eBay token?
What happens after selecting your account in the account table in the GarageSale preferences>Accounts? The “refresh token” button should get active.
http://wiki.iwascoding.com/mediawiki/index.php?title=GarageSale_Preferences#Accounts

Regards, Kristian

3

@Kristian

If I click “Refresh Access Token” - the Authorise button is greyed out.

I also can’t create or delete eBay accounts from the GarageSale Preferences window.

If I click “+” to add a new account, I get the following…

If I open the GarageSale log… it is just erroring with every action it tries.

4

Any update to this issue @kristian ?

Thanks

5

Do you have perhaps any “security” products installed, that block Garagesale from accessing eBay’s server?

See this this thread: GarageSale conflicts with eBay-Server

6

@ilja @kristian

No. Not a single AV or 3rd Party product installed that would interfere. The issue is within GarageSale - I can’t add or delete an account from Preferences.

As listed above, when I click ‘add’ an account, I get an “Acquire Access Token” window - where all options are greyed out.

This looks like a DB issue, or GarageSale upgrade issue.

Thanks

7

It’s most likely an eBay Server issue. Seems some eBay servers are not responding at the moment.

8

In case the issue is indeed caused by a local problem, did you try to delete all entries of kind “eBay token” from your account’s keychain with the “Keychain access” utility?

9

I’ve now deleted the “eBay Token” from my KeyChain, which has removed the account from GarageSale. But it is now not permitting me to create a new account…

Under account preferences:
I click “+” and “Acquire Access Token” pops up (as before).
The only thing I can do is click “Cancel”… the Authorise button is greyed out.

Any further ideas?

Thanks

10

Does anything appear in the Console utility’s window from GarageSale around the time the “Acquire Access Token” comes up?

11

In the activity viewer within GarageSale?

It flashes up with “GenericEbayOperation” with a Red Stop logo.

12

This is from the main console window:

10/04/2015 14:59:18.268 GarageSale[8364]: CoreData: warning: Unable to load class named ‘Version’ for entity ‘Version’. Class not found, using default NSManagedObject instead.
10/04/2015 14:59:28.000 kernel[0]: IO80211ScanManager::cachePurge: clearEntries[0] Firing!
10/04/2015 14:59:28.000 kernel[0]: IO80211ScanManager::cachePurge: Rescheduling in 1 seconds.
10/04/2015 14:59:29.097 GarageSale[8364]: NSURLConnection/CFURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9813)
10/04/2015 14:59:29.098 GarageSale[8364]: -[IHEbayConnector sendRequestString:verb:] ‘GetSessionID’ returned error: The certificate for this server is invalid. You might be connecting to a server that is pretending to be “api.ebay.com” which could put your confidential information at risk. (data length: 0)
10/04/2015 14:59:29.000 kernel[0]: IO80211ScanManager::cachePurge: clearEntries[0] Firing!
10/04/2015 14:59:29.000 kernel[0]: IO80211ScanManager::cachePurge: NOT Rescheduling.

13

There you go: Seems the SLL certificate on eBay’s server is invalid, somebody is tempering with your connection, or some local root certificates on your Mac are missing. Most likely its the first reason.

14

Can you please open the Terminal utility, enter this line, press return, and send me the output of the command:

openssl s_client -connect api.ebay.com:443 -servername api.ebay.com

15

CONNECTED(00000003)
depth=2 /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=© 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5
verify error:num=20:unable to get local issuer certificate
verify return:0

Certificate chain
0 s:/C=US/ST=California/L=San Jose/O=eBay, Inc./OU=eBay Site Operations/CN=api.ebay.com
i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa ©10/CN=VeriSign Class 3 Secure Server CA - G3
1 s:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa ©10/CN=VeriSign Class 3 Secure Server CA - G3
i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=© 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5
2 s:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=© 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5
i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority - G2/OU=© 1998 VeriSign, Inc. - For authorized use only/OU=VeriSign Trust Network

Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=US/ST=California/L=San Jose/O=eBay, Inc./OU=eBay Site Operations/CN=api.ebay.com
issuer=/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa ©10/CN=VeriSign Class 3 Secure Server CA - G3

No client certificate CA names sent

SSL handshake has read 4486 bytes and written 439 bytes

New, TLSv1/SSLv3, Cipher is DES-CBC3-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : DES-CBC3-SHA
Session-ID: 114EA3E3C9E1AE175405BC10E1A67B9013C98201FD8F92E3E20FE9769534F50E
Session-ID-ctx:
Master-Key: 05A483F03FB32DC8D20C10F584A4F3A990966CE7F0E94B671BDCBA70DB525457AC0328118B552F78ACE08EAA874D9FF6
Key-Arg : None
Start Time: 1428675905
Timeout : 300 (sec)
Verify return code: 20 (unable to get local issuer certificate)

16

The last line should read Verify return code: 0 (ok) instead of 20 (unable to get local issuer certificate).

What internet provider are you on? Do you have the chance to connect to eBay through a different ISP (e.g. iPhone tethering) just for testing? Do you get a different output in Terminal there?

17

I’m using a BT service, I tried using a public hotspot (nearby) but that also runs from BT with the same issue.

I’ve just tried tethering to my iPhone on Vodafone, and get the same issue:

New, TLSv1/SSLv3, Cipher is DES-CBC3-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : DES-CBC3-SHA
Session-ID: 8460FEAA4F9145993A64F8856ECF84674D4EFC6A6139A36502C58ED50511F70E
Session-ID-ctx:
Master-Key: E565C56AA4F371587CD0BC23F0A0EE61566513B951FD839C77371E67560F3B4D7E432262E056B04216589788BF33C82D
Key-Arg : None
Start Time: 1428677131
Timeout : 300 (sec)
Verify return code: 20 (unable to get local issuer certificate)

18

What happens when you check the SSL connection with a specific server from eBay’s pool like this:

openssl s_client -connect 66.211.179.150:443 -servername api.ebay.com

19

Same again, I’m afraid:

New, TLSv1/SSLv3, Cipher is DES-CBC3-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : DES-CBC3-SHA
Session-ID: 8F1B2DE924B8C6E7FEE3A289B9A619A6B315D4739A72CE196694B3137DCAF80E
Session-ID-ctx:
Master-Key: 33A2B02EF21560885D868944DE522AE925DCAF3A5CABB66F177B33A41A248720E1E87A1FC2EAEF885F619BA1B26CD4A7
Key-Arg : None
Start Time: 1428678259
Timeout : 300 (sec)
Verify return code: 20 (unable to get local issuer certificate)

20

Darn. My Mac running 10.10.2 connects to the very same server using the RC4-MD5 cipher and the certificate verifies just fine. Still curious why your Mac uses the DES-CBC3-SHA cipher and fails.

I opened a bug report with eBay. Hopefully they can find out what’s going on.