[openssl-users] Can't connect to site, OpenSSL returns error

hubga1 at seznam.cz hubga1 at seznam.cz
Sun Apr 26 17:50:25 UTC 2015


>> And it returns this kind of error
>> error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal
>> error
>>
>> The site uses TLS 1.1, AES_128_CBC_SHA1, ECDHE-ECDSA.
>
> Perhaps there is a middlebox in the way that gets version negotiation wrong.  Try adding the -tls1 flag.

It returns this with -tls1. I use latest precompiled version 
"openssl-1.0.2a-i386-win32". So you can't reproduce it? It is local then.

CONNECTED(000002FC)
3564:error:14094438:SSL routines:ssl3_read_bytes:tlsv1 alert internal 
error:.\ss
l\s3_pkt.c:1461:SSL alert number 80
3564:error:1409E0E5:SSL routines:ssl3_write_bytes:ssl handshake 
failure:.\ssl\s3
_pkt.c:645:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 7 bytes and written 0 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
     Protocol  : TLSv1
     Cipher    : 0000
     Session-ID:
     Session-ID-ctx:
     Master-Key:
     Key-Arg   : None
     PSK identity: None
     PSK identity hint: None
     SRP username: None
     Start Time: 1430070431
     Timeout   : 7200 (sec)
     Verify return code: 0 (ok)


More information about the openssl-users mailing list