Hi,

I'd say that the problem is the certificate. Normally it's being issued for particular DNS name. When you put an IP there it doesn't match thus the failure. There are basically 3 ways to avoid the problem:
1) use DNS name
2) set the handle as insecure (not recommended)
3) server must have an additional certificate issued for the IP address and present it to the client

--
Gruesse,
Jakub



From: curl-library [mailto:curl-library-bounces_at_cool.haxx.se] On Behalf Of Praveen Pvs
Sent: Mittwoch, 30. September 2015 11:15
To: libcurl development <curl-library_at_cool.haxx.se>
Subject: URL vs IP Address

Hi,

We observe that when URL is replaced with the ipaddress, we are not able to connect to the server and curl_easy_perform function returns 35 as the result code.

URL

Result

https://<https://cert1.ipcharge.net/ichapi/rh.aspx>testxssl.protectedtransactions.com/AUTH<http://testxssl.protectedtransactions.com/AUTH>

Success

https://<https://65.254.212.91/ichapi/rh.aspx>204.90.9.243/AUTH<http://204.90.9.243/AUTH>

Failure


For example - 204.90.9.243 is the IP Address for testxssl.protectedtransactions.com<http://testxssl.protectedtransactions.com>

When we try with https://204.90.9.243/AUTH, we are getting following error:

09/30/2015 14:29:31:136 0621 1115694192 VHI: sendRecvViaCurl: CURLE ERROR [35]
09/30/2015 14:29:31:137 0621 1115694192 VHI: sendRecvViaCurl: ERROR! SSL/TLS Handshake FAILED
09/30/2015 14:29:31:137 0621 1115694192 VHI: sendRecvViaCurl: ERROR! Lib Curl Error [error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure]

Could you please let me know actual reason to get this error.

Is anything on the client side we can do to avoid this error?

Thank you for you help and time.

Regards
Praveen

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2015-09-30