Bugs item #3165773, was opened at 2011-01-26 10:44
Message generated for change (Comment added) made by bagder
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=3165773&group_id=976

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: SSL/TLS
Group: bad behaviour
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Mika Fischer (zoop)
Assigned to: Daniel Stenberg (bagder)
Summary: SSL23_GET_SERVER_HELLO when connecting to OpenSSL 1.0.0

Initial Comment:
When curl is linked against OpenSSL 0.9.8 and tries to access a server running OpenSSL 1.0.0, the SSL handshake fails with:
curl: (35) error:14077458:SSL routines:SSL23_GET_SERVER_HELLO:reason(1112)

The openssl command line tool works fine though (openssl s_client --connect <server>:443). So it seems like curl is doing something different than the openssl command line tool.

I've tried this under Windows with msysgit (which includes curl 7.21.1) and under OpenSuSE 11.2 with the included curl (7.19.6) and the latest version (7.21.3). The OpenSSL version in all tests was 0.9.8k.

See also:
http://groups.google.com/group/msysgit/browse_thread/thread/8d23933905cf9f05
http://www.mentby.com/Group/curl/curl-outputs-ssl23getserverhello.html

----------------------------------------------------------------------

>Comment By: Daniel Stenberg (bagder)
Date: 2011-02-03 22:54

Message:
Do you happen to have such a failing server accessible to debug this
problem against?

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=3165773&group_id=976
Received on 2011-02-03