Buy commercial curl support. We
help you work out your issues, debug your libcurl applications, use the API,
port to new platforms, add new features and more. With a team lead by the
curl founder Daniel himself.
Re: OpenSSL wrong version number error when using in-flight wifi
- Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]
From: Gisle Vanem via curl-users <curl-users_at_lists.haxx.se>
Date: Mon, 22 Jul 2024 09:21:52 +0200
Rohan Ganapavarapu wrote:
> Only happens with some sites. I am on an united flight using in-flight wifi.
>
> curl --version
>
> curl 8.7.1 (x86_64-pc-linux-gnu) libcurl/8.7.1 OpenSSL/3.0.13 zlib/1.3.1 c-ares/1.28.1 libpsl/0.21.5 nghttp2/1.61.0
> Release-Date: 2024-03-27
> Protocols: dict file ftp ftps http https imap imaps ipfs ipns mqtt pop3 pop3s rtsp smtp smtps tftp
> Features: alt-svc AsynchDNS HSTS HTTP2 HTTPS-proxy IPv6 Largefile libz NTLM PSL threadsafe TLS-SRP UnixSockets
>
> curl -v https://ollama.com
>
> * Host ollama.com:443 was resolved.
> * IPv6: (none)
> * IPv4: 34.120.132.20
> * Trying 34.120.132.20:443...
> * Connected to ollama.com (34.120.132.20) port 443
> * ALPN: curl offers h2,http/1.1
> * TLSv1.3 (OUT), TLS handshake, Client hello (1):
> * CAfile: /etc/ssl/certs/ca-certificates.crt
> * CApath: /etc/ssl/certs
> * OpenSSL/3.0.13: error:0A00010B:SSL routines::wrong version number
> * Closing connection
> curl: (35) OpenSSL/3.0.13: error:0A00010B:SSL routines::wrong version number
>
> I attached the wireguard pcap.
Works fine for me. But in your case, the connection seems to
get terminated by 'www.unitedwifi.com' with:
HTTP/1.1 307 Temporary Redirect
Via: 1.0 middlebox
https://www.unitedwifi.com
Connection: close
www.unitedwifi.com is some Akamai Middlebox thing that
breaks curl?.
And Wireshark says for this packet:
[Expert Info (Warning/Security): Unencrypted HTTP protocol detected
over encrypted port, could indicate a dangerous misconfiguration.]
You need to pay up for Wi-Fi first I guess.
From https://www.united.com/en/us/fly/travel-experience/inflight-wifi.html:
On U.S. domestic and short-haul international flights, like
those to Mexico and Canada, Wi-Fi is $8, or 800 miles, for
MileagePlus® members and $10 for everyone else...
Date: Mon, 22 Jul 2024 09:21:52 +0200
Rohan Ganapavarapu wrote:
> Only happens with some sites. I am on an united flight using in-flight wifi.
>
> curl --version
>
> curl 8.7.1 (x86_64-pc-linux-gnu) libcurl/8.7.1 OpenSSL/3.0.13 zlib/1.3.1 c-ares/1.28.1 libpsl/0.21.5 nghttp2/1.61.0
> Release-Date: 2024-03-27
> Protocols: dict file ftp ftps http https imap imaps ipfs ipns mqtt pop3 pop3s rtsp smtp smtps tftp
> Features: alt-svc AsynchDNS HSTS HTTP2 HTTPS-proxy IPv6 Largefile libz NTLM PSL threadsafe TLS-SRP UnixSockets
>
> curl -v https://ollama.com
>
> * Host ollama.com:443 was resolved.
> * IPv6: (none)
> * IPv4: 34.120.132.20
> * Trying 34.120.132.20:443...
> * Connected to ollama.com (34.120.132.20) port 443
> * ALPN: curl offers h2,http/1.1
> * TLSv1.3 (OUT), TLS handshake, Client hello (1):
> * CAfile: /etc/ssl/certs/ca-certificates.crt
> * CApath: /etc/ssl/certs
> * OpenSSL/3.0.13: error:0A00010B:SSL routines::wrong version number
> * Closing connection
> curl: (35) OpenSSL/3.0.13: error:0A00010B:SSL routines::wrong version number
>
> I attached the wireguard pcap.
Works fine for me. But in your case, the connection seems to
get terminated by 'www.unitedwifi.com' with:
HTTP/1.1 307 Temporary Redirect
Via: 1.0 middlebox
https://www.unitedwifi.com
Connection: close
www.unitedwifi.com is some Akamai Middlebox thing that
breaks curl?.
And Wireshark says for this packet:
[Expert Info (Warning/Security): Unencrypted HTTP protocol detected
over encrypted port, could indicate a dangerous misconfiguration.]
You need to pay up for Wi-Fi first I guess.
From https://www.united.com/en/us/fly/travel-experience/inflight-wifi.html:
On U.S. domestic and short-haul international flights, like
those to Mexico and Canada, Wi-Fi is $8, or 800 miles, for
MileagePlus® members and $10 for everyone else...
-- --gv -- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-users Etiquette: https://curl.se/mail/etiquette.htmlReceived on 2024-07-22