Bugs item #3165773, was opened at 2011-01-26 10:44
Message generated for change (Comment added) made by bagder
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=3165773&group_id=976

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: SSL/TLS
Group: bad behaviour
>Status: Pending
Resolution: Works For Me
Priority: 5
Private: No
Submitted By: Mika Fischer (zoop)
Assigned to: Daniel Stenberg (bagder)
Summary: SSL23_GET_SERVER_HELLO when connecting to OpenSSL 1.0.0

Initial Comment:
When curl is linked against OpenSSL 0.9.8 and tries to access a server running OpenSSL 1.0.0, the SSL handshake fails with:
curl: (35) error:14077458:SSL routines:SSL23_GET_SERVER_HELLO:reason(1112)

The openssl command line tool works fine though (openssl s_client --connect <server>:443). So it seems like curl is doing something different than the openssl command line tool.

I've tried this under Windows with msysgit (which includes curl 7.21.1) and under OpenSuSE 11.2 with the included curl (7.19.6) and the latest version (7.21.3). The OpenSSL version in all tests was 0.9.8k.

See also:
http://groups.google.com/group/msysgit/browse_thread/thread/8d23933905cf9f05
http://www.mentby.com/Group/curl/curl-outputs-ssl23getserverhello.html

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2011-02-17 22:29

Message:
Thanks for reporting this issue and helping us improve curl and libcurl.

We're awaiting feedback in this issue. Due to this, I have set the state
of this issue to pending and it will automatically get closed later on
unless we get further info.

Please consider answering the outstanding questions or providing the
missing info so that we can proceed to resolve this issue!

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2011-02-08 22:56

Message:
I've not managed to repeat this problem.

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2011-02-03 22:54

Message:
Do you happen to have such a failing server accessible to debug this
problem against?

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=3165773&group_id=976
Received on 2011-02-17