I am testing the SSL layer on a few remote web servers using curl-7.37 (and curl-7.36) I get the following errors when forcing TLSv1 (or not forcing any particular SSL version).

(extsignon.lexmark.com is just one of the few servers I get this error and it seems to be running Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/1.0.0d)

--------------------------------
$curl -I1 https://extsignon.lexmark.com:443
curl: (35) error:14077458:SSL routines:SSL23_GET_SERVER_HELLO:reason(1112)

$curl -I1k https://extsignon.lexmark.com:443 --cipher DHE-RSA-AES256-SHA
curl: (35) error:14077458:SSL routines:SSL23_GET_SERVER_HELLO:reason(1112)

$curl --version
curl 7.37.0 (i686-pc-linux-gnu) libcurl/7.37.0 OpenSSL/0.9.8o zlib/1.2.3.4 libidn/1.15 libssh2/1.2.6
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp scp sftp smtp smtps telnet tftp
Features: IDN IPv6 Largefile NTLM NTLM_WB SSL libz


When forcing SSLv3 on the same client machine, it works fine:
--------------------------------
$curl -I3 https://extsignon.lexmark.com:443
HTTP/1.1 200 OK
...

$curl -I1k https://extsignon.lexmark.com:443 --cipher DHE-RSA-AES256-SHA
HTTP/1.1 200 OK
...


The same test also works fine when using an older version of curl that comes with Debian 6.0.6 (again on the same machine):
--------------------------------
$curl -I1 https://extsignon.lexmark.com:443
HTTP/1.1 200 OK

$curl --version
curl 7.21.0 (i486-pc-linux-gnu) libcurl/7.21.0 OpenSSL/0.9.8o zlib/1.2.3.4 libidn/1.15 libssh2/1.2.6
Protocols: dict file ftp ftps http https imap imaps ldap ldaps pop3 pop3s rtsp scp sftp smtp smtps telnet tftp
Features: GSS-Negotiate IDN IPv6 Largefile NTLM SSL libz


Any help is appreciated.

- Dimi

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-users
FAQ: http://curl.haxx.se/docs/faq.html
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2014-05-21