ssl - Curl keeps saying "SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure" but it should be TLS -


the php version on webserver updated. notice when downloading external https urls curl, one specific server fails, giving me error:

ssl23_get_server_hello:sslv3 alert handshake failure

downloading https stuff server though curl worked fine before.

now strange is: seems ssl3 error, understood other cases regarding error (also here on so) it's due ssl3 no longer being supported updated versions of php or curl. , rightly so, since ssl3 insecure.

however, particular webserver uses tls1.2, , no means ssl3.

so if curl not using ssl3, , neither webserver, why still getting ssl3 related errors?

i tried setting curlopt_sslversion 4, 5 or 6, , setting curlopt_ssl_cipher_list tlsv1, no avail, error keeps coming up.

although error message looks using ssl 3.0 not. since tls1.0 practically ssl3.1 etc find lots of functions , error messages having sslv3 string within tls code path in openssl. problem specific server else , 1 need know server hostname , installed version of openssl find out more problem.

edit: based on comment version of openssl used curl 0.9.8b. since server can tls 1.2 handshake fail, since tls 1.2 supported since openssl 1.0.1. apart 0.9.8b years out of support , has several security problems got fixed in later versions.


Comments

Popular posts from this blog

get url and add instance to a model with prefilled foreign key :django admin -

css - Make div keyboard-scrollable in jQuery Mobile? -

ruby on rails - Seeing duplicate requests handled with Unicorn -