ID: 49527
Updated by: [email protected]
Reported By: lr at pcorp dot us
-Status: Open
+Status: Feedback
Bug Type: cURL related
Operating System: Windows
PHP Version: 5.2.10
New Comment:
What is the curl version in the 5.2.6 vs. 5.2.10? (and openssl), check
from phpinfo().
Previous Comments:
------------------------------------------------------------------------
[2009-09-11 04:46:06] lr at pcorp dot us
Description:
------------
We recently upgraded our windows php from 5.2.6 to 5.2.10 (using
binaries provided on php website) and since then one of our apps that
uses a CURL SSL connection has stopped working.
Curl throws an error
error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake
failure
Reproduce code:
---------------
The code we had in prior versions of PHP that worked fine were
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch,CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($ch,CURLOPT_SSLVERSION,3);
curl_setopt($ch,CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($ch, CURLOPT_URL, $somehttpsurlhere);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$t = curl_exec($ch);
if (curl_errno($ch)){
print curl_error($ch);
}
Expected result:
----------------
Before this used to work and $t would have content of ssl page.
Unfortunately can't devulge the exact ssl sites since they are private
client ones. 2 that we have tried don't work.
One uses an SSL cert issues by Comodo EV SGC CA
The other uses one issued by Thawte Premium Server CA (is a wildcard
one).
Both certs register as fine in IE and Firefox.
Actual result:
--------------
Now gives
error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake
failure
This might be just a change in how to deal with SSL connections, but
couldn't find any documentation about curl or PHP website that was
helpful in this regard.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=49527&edit=1
