Balaouras, Dimitrios in gmane.comp.web.curl.general (Wed, 21 May 2014
16:40:43 +0000):
>I am testing the SSL layer on a few remote web servers using curl-7.37 (and curl-7.36) I get the following errors when forcing TLSv1 (or not forcing any particular SSL version).
>
>(extsignon.lexmark.com is just one of the few servers I get this error and it seems to be running Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/1.0.0d)
>
>--------------------------------
>$curl -I1 https://extsignon.lexmark.com:443
>curl: (35) error:14077458:SSL routines:SSL23_GET_SERVER_HELLO:reason(1112)
>
>$curl -I1k https://extsignon.lexmark.com:443 --cipher DHE-RSA-AES256-SHA
>curl: (35) error:14077458:SSL routines:SSL23_GET_SERVER_HELLO:reason(1112)
>
>$curl --version
>curl 7.37.0 (i686-pc-linux-gnu) libcurl/7.37.0 OpenSSL/0.9.8o zlib/1.2.3.4 libidn/1.15 libssh2/1.2.6
>Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp scp sftp smtp smtps telnet tftp
>Features: IDN IPv6 Largefile NTLM NTLM_WB SSL libz

It is a problem in OpenSSL 0.9.8x when connecting to OpenSSL 1.x. You
will have to patch the OpenSSL in your client:
http://sourceforge.net/p/curl/bugs/1037/?limit=10&page=3#c9b6

Jan

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-users
FAQ: http://curl.haxx.se/docs/faq.html
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2014-05-22