On Thursday 25 February 2016 09:15:37 cnm marketing wrote: > Hi, > > We use two different ports to do libcurl operations on "CentOS release 6.6 > (Final)". > > In an internal port A, with "CURLOPT_VERBOSE" on, we got this message "* > Initializing NSS with certpath: sql:/etc/pki/nssdb" when using url > "https://xxxx.aaa.com:portA";, then program hangs. However, it works if we > change "https" to "http". In addition, we try "openssl s_client -cipher > ...." to get cipher information via port A, it fails (timeout) for all the > cipher returned from "openssl ciphers 'ALL:eNULL' ....". > > In another port B, it works for both "https" and "http". When using openssl > to get cipher info. it also works fine. > > > Thanks, > cnm
Have you tried to switch the SSL version and/or enabled cipher-suites? OpenSSL and NSS have different default configuration from each other. Please have a look at the following options: https://curl.haxx.se/libcurl/c/CURLOPT_SSLVERSION.html https://curl.haxx.se/libcurl/c/CURLOPT_SSL_CIPHER_LIST.html Kamil ------------------------------------------------------------------- List admin: https://cool.haxx.se/list/listinfo/curl-library Etiquette: https://curl.haxx.se/mail/etiquette.html
