cURL / Mailing Lists / curl-users / Single Mail

curl-users

Re: Curl outputs SSL23_GET_SERVER_HELLO

From: Kamil Dudka <kdudka_at_redhat.com>
Date: Fri, 26 Mar 2010 16:41:17 +0100

On Thu March 25 2010 22:15:42 Robert Banfield wrote:
> The basic premise of this is that after upgrading our webserver to
> Fedora 12 which uses openssl 1.0.0 beta 4, our curl client can no longer
> complete the ssl handshake unless it is also compiled with openssl 1.0.0
> beta 4. Though this might immediately sound like an openssl problem,
> there are some oddities...
>
> In all the tests I'm including below, the curl version used is 7.20.0.
> It's worth noting though that I have tried some versions of 7.19.x and
> found the same behavior. I've also tried older versions of SSL
> 0.9.8(k-m) on the client with similar results. My client is compiled by
> me using the same configure flags for each version, and the server
> versions are from Fedora rpms.
>
> Client1: Fedora 12, Curl=7.20.0, SSL=0.9.8n
> Client2: Fedora 12, Curl=7.20.0, SSL=1.0.0beta4
> Server1: Fedora 10, Apache=2.2.14, SSL=0.9.8g
> Server2: Fedora 12, Apache=2.2.14, SSL=1.0.0beta4

I suggest to try the genuine (lib)curl from Fedora also. It uses NSS instead
of OpenSSL and can help you to exclude server-side problem.

Kamil
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-users
FAQ: http://curl.haxx.se/docs/faq.html
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2010-03-26