Re: [openssl-users] Can't connect to site, OpenSSL returns error

2015-04-27 Thread Salz, Rich
So why does it work for me? Well, who knows when the remote server wants to see SNI? It could be based on url, ipaddress, etc. ___ openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Can't connect to site, OpenSSL returns error

2015-04-27 Thread hubga1
I tried this command openssl.exe s_client -connect ezfile.ch:443 And it returns this kind of error error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error I can not reproduce this. What version are you using? There is nothing wrong with that server, so it's most likely

Re: [openssl-users] Can't connect to site, OpenSSL returns error

2015-04-27 Thread hubga1
And it returns this kind of error error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error The site uses TLS 1.1, AES_128_CBC_SHA1, ECDHE-ECDSA. Perhaps there is a middlebox in the way that gets version negotiation wrong. Try adding the -tls1 flag. Flag -servername

Re: [openssl-users] Can't connect to site, OpenSSL returns error

2015-04-27 Thread Salz, Rich
It is weird that it worked for you. Anyway I found a way how to fix it (if I can call it a fix). The key is to provide a flag -servername to enable SNI (Server Name Indication). It's not wrong to call it a fix. The server you are talking to is configured to require SNI, apparently. This

Re: [openssl-users] Can't connect to site, OpenSSL returns error

2015-04-27 Thread Kurt Roeckx
On Mon, Apr 27, 2015 at 02:39:08PM +, Salz, Rich wrote: It is weird that it worked for you. Anyway I found a way how to fix it (if I can call it a fix). The key is to provide a flag -servername to enable SNI (Server Name Indication). It's not wrong to call it a fix. The server you

Re: [openssl-users] Can't connect to site, OpenSSL returns error

2015-04-26 Thread hubga1
On Sun, Apr 26, 2015 at 07:05:11PM +0200, hub...@seznam.cz wrote: I tried this command openssl.exe s_client -connect ezfile.ch:443 And it returns this kind of error error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error I can not reproduce this. What version are you

Re: [openssl-users] Can't connect to site, OpenSSL returns error

2015-04-26 Thread Salz, Rich
And it returns this kind of error error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error The site uses TLS 1.1, AES_128_CBC_SHA1, ECDHE-ECDSA. Perhaps there is a middlebox in the way that gets version negotiation wrong. Try adding the -tls1 flag.

Re: [openssl-users] Can't connect to site, OpenSSL returns error

2015-04-26 Thread hubga1
And it returns this kind of error error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error The site uses TLS 1.1, AES_128_CBC_SHA1, ECDHE-ECDSA. Perhaps there is a middlebox in the way that gets version negotiation wrong. Try adding the -tls1 flag. It returns this with

[openssl-users] Can't connect to site, OpenSSL returns error

2015-04-26 Thread hubga1
I tried this command openssl.exe s_client -connect ezfile.ch:443 And it returns this kind of error error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error The site uses TLS 1.1, AES_128_CBC_SHA1, ECDHE-ECDSA. Does anybody know where the problem is? Is this server

Re: [openssl-users] Can't connect to site, OpenSSL returns error

2015-04-26 Thread Kurt Roeckx
On Sun, Apr 26, 2015 at 07:05:11PM +0200, hub...@seznam.cz wrote: I tried this command openssl.exe s_client -connect ezfile.ch:443 And it returns this kind of error error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error I can not reproduce this. What version are you