Adding a "$Net::SSLeay::ssl_version = 3;" in my Perl script fixed the
problem as well (rather than directly modifying SSLeay.pm). Thanks!
Just out of curiosity, shouldn't OpenSSL automatically detect the type of
connection it needs? Or is that site's software really broken? Clearly
people use it everyday, so the SSL support in the major browsers must be
figuring it out OK.
Tim Behrendsen
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED]
Sent: Wednesday, December 08, 1999 2:33 PM
To: [EMAIL PROTECTED]
Subject: RE: Problem with retrieving Ameritrade https page
> echo 'GET /cgi-bin/login.cgi' | /usr/local/ssl/bin/openssl
> s_client -connect wwws.ameritrade.com:443
> CONNECTED(00000003)
> 1042:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake
> failure:s23_lib.c:203:
Just change that into:
echo 'GET /cgi-bin/login.cgi' | /usr/local/ssl/bin/openssl s_client -connect
wwws.ameritrade.com:443 -ssl3
(-ssl2 would also work, -tls1 doesn't).
It probably has to do with the rather old version of apache/stronghold that
they're using. I don't remember just how old it is, but "Stronghold/2.2
Apache/1.2.5" is very close to antique ;-) If it was mine, I would have
upgraded that server long ago. Now that I think about it, there used to be a
lot of people having trouble connecting to certain websites without
specifying the protocol (f.ex. older Strongholds) - but then it usually
resulted in a core dump from s_client.
As for fixing Net::SSLeay, it's just a question of uncommenting a single
line in SSLeay.pm file:
#$Net::SSLeay::ssl_version = 3;
hope this helps,
vh.
Mads Toftum, MT165-RIPE
---
"No, I'm not going to explain it. If you can't figure it out,
you didn't want to know anyway..." --Larry Wall
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
