Hi Oscar,

So great news, your suggestion worked, I added the line;

curl_easy_setopt(curl, CURLOPT_SSL_OPTIONS, CURLSSLOPT_ALLOW_BEAST);

and this works. The CURLOPT_SSL_CIPHER_LIST suggestion didn't seem to do
much in terms of this issue but its working now so just happy with that.

Thanks so much Oscar

Chris

On 7 January 2013 11:21, Oscar Koeroo <okoeroo_at_nikhef.nl> wrote:

> On 06-01-13 13:06, Chris Knight wrote:
> > So just to give an update on this,
> >
> > After receiving a tip off I managed to get a work around for this issue.
> It
> > turns out the problem was to do with using libcurl and openssl because
> when
> > I use polarssl there is no problem.
> >
> > I tried figuring out exactly what the issue was but given ssl is not my
> area
> > of expertise I can't dig too deep before I get a little bit lost, just
> > thought I should let people know that there is a way round the issue if
> they
> > come across it.
> >
> > Chris
>
>
> Hi Chris,
>
> Could you test with an OpenSSL build curl and test with the following
> cipher
> list:
>
> "ALL:!ECDH" as --ciphers option (mind the ! sign on the command line) or
> set
> an explicit cipher list with curl_{easy,multi,share}_setopt()
> CURLOPT_SSL_CIPHER_LIST.
>
> Last year we had a problem with OpenSSL and Java services unable to talk to
> each other because of the preference of ECDH and it being borked in java.
>
>
> Yet another option is setting CURLOPT_SSL_OPTIONS with the
> CURLSSLOPT_ALLOW_BEAST option or the --ssl-allow-beast option.
>
>
> I'm interested to know if either of these worked and also the server
> version. You mentioned IIS, but I didn't find which flavor/version of it
> you
> are using.
>
>
> Oscar
>
>
> -------------------------------------------------------------------
> List admin: http://cool.haxx.se/list/listinfo/curl-library
> Etiquette: http://curl.haxx.se/mail/etiquette.html
>

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2013-01-11