Openssl s_client error ?

[Matt Caswell]

On 27/04/2020 09:07, FooCrypt wrote:
> Hi
> 
> Im just testing openssl s_client against a server IP and it appears to be failing with the following. :
> 
> openssl s_client -showcerts -servername ${Site} -connect ${Site}:443 -debug </dev/null
> 
> OpenSSL 1.0.2u  20 Dec 2019 : 140337275680448:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:827:
> OpenSSL 1.1.0l  10 Sep 2019 : 140642678284928:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:251:
> OpenSSL 1.1.1a  20 Nov 2018 : 140267470374080:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1b  26 Feb 2019 : 140658956276928:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1c  28 May 2019 : 140313236694272:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1d  10 Sep 2019 : 140526368781568:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1e  17 Mar 2020 : 139985685132608:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1f  31 Mar 2020 : 139973563405632:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1g  21 Apr 2020 : 139893511771456:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1  11 Sep 2018 : 140632691274944:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> 
> 
> Is this a server side issue / firewall / load balancer / issue ???

Looks like the server is not responding with something that looks like
SSL/TLS. A wireshark trace might  tell you more.

Matt