[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error



On Mon, 24 Nov 2014 11:10:35 +1100, Scott Ferguson wrote:
On 21/11/14 04:56, Teresa e Junior wrote:
Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
https://www.basebit.com.br', it fails with the message: curl: (35)
error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert
internal error

I have done some research, and found suggestions that `curl
--sslv3' should work, but then I get: curl: (35) error:1408F10B:SSL
routines:SSL3_GET_RECORD:wrong version number

I have not been successful in trying to convince the website
administrator to restrict available ciphers in Tomcat's https
connector, as mentioned here:
http://georgik.sinusgear.com/2012/02/19/tomcat-7-and-curl-ssl23_get_server_hellotlsv1-alert-internal-error/

So I would like if it could be possible to get this working here on my
part! `curl --version' returns: curl 7.26.0 (i486-pc-linux-gnu)
libcurl/7.26.0 OpenSSL/1.0.1e zlib/1.2.7 libidn/1.25 libssh2/1.4.2
librtmp/2.3 Protocols: dict file ftp ftps gopher http https imap
imaps ldap pop3 pop3s rtmp rtsp scp sftp smtp smtps telnet tftp
Features: Debug GSS-Negotiate IDN IPv6 Largefile NTLM NTLM_WB SSL
libz TLS-SRP

Thank you! Teresa and Junior


I also get this failure (curl 7.26.0-1+wheezy):- curl
https://www.basebit.com.br curl: (35) error:14077438:SSL
routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error

The site uses "PKCS #1 SHA-256 With RSA Encryption"
(TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, 128-bit keys) so... *this
works*:- curl --ciphers SHA256 https://www.basebit.com.br

curl 7.26.0-1+wheezy

Kind regards

Yesterday this worked:
curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br

Today it doesn't, so I came up with these: AES128-SHA AES128-SHA256
AES256-SHA AES256-SHA256

Your solution is much simpler, thank you!
Teresa e Junior


Reply to: