On Tuesday 14 April 2015 20:36:11 Alexandre Arantes wrote:
> * SSL read: errno -12195
> * Closing connection #0 = = = = = = = = = = = = = = = = = = = = = = = = = =
> = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =
> = Any ideas on what I'm doing wrong or what is missing? Why am I getting
> this error?NOTE: I tried playing with CURLOPT_SSLVERSION. First I set it
> to 3 and the error changed slightly. I still got exactly the same verbose
> output, but towards the bottom, Where it reads "SSL read: errno -12195", it
> became "SSL read: errno -12271".Then I change the version to 2, and it
> crashed earlier giving me "NSS error -12268" around line 6 of the verbose
> output.Finally, when I tried 4 or 5, the verbose file was exactly the same
> as above.Thanks.Alex

I would suggest to double-check your certificates to make sure that you do not
use server certificate as CA certificate etc.

You can find meaning of the error codes at this page:

http://www-archive.mozilla.org/projects/security/pki/nss/ref/ssl/sslerr.html

-12195 is SSL_ERROR_UNKNOWN_CA_ALERT: "Peer does not recognize and trust the
CA that issued your certificate."

-12268 is SSL_ERROR_SSL_DISABLED: "The local socket is configured in such a
way that it cannot use any of the SSL cipher suites. Possible causes include:
(a) both SSL2 and SSL3 are disabled, (b) All the individual SSL cipher suites
are disabled, or (c) the socket is configured to handshake as a server, but
the certificate associated with that socket is inappropriate for the Key
Exchange Algorithm selected."

-12271 is SSL_ERROR_BAD_CERT_ALERT: "SSL peer cannot verify your certificate."

An up2date version of libcurl would translate the error codes to messages for
you automatically.

Kamil
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2015-04-15