cURL / Mailing Lists / curl-users / Single Mail

curl-users

Re: curl fails to negotiate TLS handshake with server unless compatible cipher suite is explicitly defined on commandline

From: Jason Strongman <jasonstrongman2016_at_gmail.com>
Date: Mon, 23 Mar 2015 11:01:20 -0500

I would suggest you reach out to your dev guys who are more familiar
with RHEL 6.x libnss and it's limitations. This is all well
documented.

On Mon, Mar 23, 2015 at 10:59 AM, Jason Strongman
<jasonstrongman2016_at_gmail.com> wrote:
> You base that on what ? I dont see any reference to any ssl library in
> the OP. In my findings libnss as shipped with RHEl 6.x does not
> support most modern cipher suites. You have to compile libcurl against
> libssl or the latest version of libnss.. This is all well documented.
>
>
>
> On Mon, Mar 23, 2015 at 10:36 AM, Kamil Dudka <kdudka_at_redhat.com> wrote:
>> On Monday 23 March 2015 10:17:47 Jason Strongman wrote:
>>> sounds like you are using curl shipped as part of a RHEL based
>>> distribution.
>>
>> Sounds why? The error message looks like it was provided by OpenSSL.
>>
>> Kamil
>>
>>> >> curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert
>>> >> handshake failure>
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-users
FAQ: http://curl.haxx.se/docs/faq.html
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2015-03-23