hi.

I've got an older box, fedora 13, cant update the os for different reasons.

I'm running/testing a curl use for a target site, and getting a ssl
connection error. with the same cmd, running on a centos 6 box, it
works.

I'm trying to track down/debug the issue, and I get an nss error code
on the fedora box, but have no idea how to continue.

As far as I can tell, both curl were built using the same underlying libs
ldd /usr/bin/curl on both systems appears to return the same underlying libs...

curl -k -L "https://ssb.vcu.edu" -vvv

* About to connect() to ssb.vcu.edu port 443 (#0)
* Trying 128.172.30.129... connected
* Connected to ssb.vcu.edu (128.172.30.129) port 443 (#0)
* Initializing NSS with certpath: /etc/pki/nssdb
* warning: ignoring unsupported value (1) of ssl.verifyhost
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* NSS error -12286
* Error in TLS handshake, trying SSLv3...
> GET / HTTP/1.1
> User-Agent: curl/7.20.1 (x86_64-redhat-linux-gnu) libcurl/7.20.1 NSS/3.12.8.0 zlib/1.2.3 libidn/1.16 libssh2/1.2.4
> Host: ssb.vcu.edu
> Accept: */*
>
* Connection died, retrying a fresh connect
* Closing connection #0
* Issue another request to this URL: 'https://ssb.vcu.edu'
* About to connect() to ssb.vcu.edu port 443 (#0)
* Trying 128.172.30.129... connected
* Connected to ssb.vcu.edu (128.172.30.129) port 443 (#0)
* TLS disabled due to previous handshake failure
* warning: ignoring unsupported value (1) of ssl.verifyhost
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* NSS error -12286
* Closing connection #0
* SSL connect error
curl: (35) SSL connect error

any thoughts
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-users
FAQ: http://curl.haxx.se/docs/faq.html
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2013-10-31