From: lr at pcorp dot us
Operating system: Windows
PHP version: 5.2.10
PHP Bug Type: cURL related
Bug description: curl: sslv3 alert handshake failure
Description:
------------
We recently upgraded our windows php from 5.2.6 to 5.2.10 (using binaries
provided on php website) and since then one of our apps that uses a CURL
SSL connection has stopped working.
Curl throws an error
error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure
Reproduce code:
---------------
The code we had in prior versions of PHP that worked fine were
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch,CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($ch,CURLOPT_SSLVERSION,3);
curl_setopt($ch,CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($ch, CURLOPT_URL, $somehttpsurlhere);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$t = curl_exec($ch);
if (curl_errno($ch)){
print curl_error($ch);
}
Expected result:
----------------
Before this used to work and $t would have content of ssl page.
Unfortunately can't devulge the exact ssl sites since they are private
client ones. 2 that we have tried don't work.
One uses an SSL cert issues by Comodo EV SGC CA
The other uses one issued by Thawte Premium Server CA (is a wildcard
one).
Both certs register as fine in IE and Firefox.
Actual result:
--------------
Now gives
error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure
This might be just a change in how to deal with SSL connections, but
couldn't find any documentation about curl or PHP website that was helpful
in this regard.
--
Edit bug report at http://bugs.php.net/?id=49527&edit=1
--
Try a snapshot (PHP 5.2):
http://bugs.php.net/fix.php?id=49527&r=trysnapshot52
Try a snapshot (PHP 5.3):
http://bugs.php.net/fix.php?id=49527&r=trysnapshot53
Try a snapshot (PHP 6.0):
http://bugs.php.net/fix.php?id=49527&r=trysnapshot60
Fixed in SVN:
http://bugs.php.net/fix.php?id=49527&r=fixed
Fixed in SVN and need be documented:
http://bugs.php.net/fix.php?id=49527&r=needdocs
Fixed in release:
http://bugs.php.net/fix.php?id=49527&r=alreadyfixed
Need backtrace:
http://bugs.php.net/fix.php?id=49527&r=needtrace
Need Reproduce Script:
http://bugs.php.net/fix.php?id=49527&r=needscript
Try newer version:
http://bugs.php.net/fix.php?id=49527&r=oldversion
Not developer issue:
http://bugs.php.net/fix.php?id=49527&r=support
Expected behavior:
http://bugs.php.net/fix.php?id=49527&r=notwrong
Not enough info:
http://bugs.php.net/fix.php?id=49527&r=notenoughinfo
Submitted twice:
http://bugs.php.net/fix.php?id=49527&r=submittedtwice
register_globals:
http://bugs.php.net/fix.php?id=49527&r=globals
PHP 4 support discontinued: http://bugs.php.net/fix.php?id=49527&r=php4
Daylight Savings: http://bugs.php.net/fix.php?id=49527&r=dst
IIS Stability:
http://bugs.php.net/fix.php?id=49527&r=isapi
Install GNU Sed:
http://bugs.php.net/fix.php?id=49527&r=gnused
Floating point limitations:
http://bugs.php.net/fix.php?id=49527&r=float
No Zend Extensions:
http://bugs.php.net/fix.php?id=49527&r=nozend
MySQL Configuration Error:
http://bugs.php.net/fix.php?id=49527&r=mysqlcfg
