ssl - Curl keeps saying "SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure" but it should be TLS -
the php version on webserver updated. notice when downloading external https urls curl, one specific server fails, giving me error:
ssl23_get_server_hello:sslv3 alert handshake failure
downloading https stuff server though curl worked fine before.
now strange is: seems ssl3 error, understood other cases regarding error (also here on so) it's due ssl3 no longer being supported updated versions of php or curl. , rightly so, since ssl3 insecure.
however, particular webserver uses tls1.2, , no means ssl3.
so if curl not using ssl3, , neither webserver, why still getting ssl3 related errors?
i tried setting curlopt_sslversion
4, 5 or 6, , setting curlopt_ssl_cipher_list
tlsv1
, no avail, error keeps coming up.
although error message looks using ssl 3.0 not. since tls1.0 practically ssl3.1 etc find lots of functions , error messages having sslv3 string within tls code path in openssl. problem specific server else , 1 need know server hostname , installed version of openssl find out more problem.
edit: based on comment version of openssl used curl 0.9.8b. since server can tls 1.2 handshake fail, since tls 1.2 supported since openssl 1.0.1. apart 0.9.8b years out of support , has several security problems got fixed in later versions.
Comments
Post a Comment