* Jose Kahan: > On Wed, Oct 22, 2014 at 05:43:00PM +0200, Florian Weimer wrote: >> >> Can you provide more details? This should definitely not happen. > > Sure. > > I've two boxes, a debian squeeze up to date with the latest > security releases: > > curl: 7.21.0-2.1+squeeze9 > openssl: 0.9.8o-4squeeze17 > apache2: 2.2.22-13+deb7u3 > > and a debian wheezy, with the > latest official: > > curl: 7.26.0-1+wheezy10 > openssl: 1.0.1e-2+deb7u13 > apache2: 2.2.22-13+deb7u3 > > Apache is configured to only support tls (-sslv2, -sslv3).
I'll try to reproduce this, but in the meantime, could you attempt to connect with openssl s_client -connect dest-wheezy.example.com:443 -no_ssl2 from the squeeze box? It would be interesting to know if this succeeds or not. ------------------------------------------------------------------- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html
