Chris Brannon wrote:
> curl -k --verbose https://shop.aph.org/
> curl: (35) Unknown SSL protocol error in connection to shop.aph.org:443

Confirmed, same here with curl.
Even more interesting, I got my own nonblocking code interfacing openssl
(OpenSSL 1.1.0-dev xx XXX xxxx), and that fails too.
But openssl's s_client work when using nbio (which I do not use in my code).

openssl s_client -debug -nbio -connect shop.aph.org:443

So, I had a look on wireshark, and s_client handshake claims to be
sslv2, switching to tlsv1 during handshake ...

Enforcing SSLv2_client_method (in my own code) -which is not an
option!-, it connects/handshakes, but does not switch to tlsv1.

So, I doubt it is an curl problem, the servers ssl configuration is at
least weird, and openssl does not handle it.

Markus
Received on 2009-07-21