And it returns this kind of error
error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal
error

The site uses TLS 1.1, AES_128_CBC_SHA1, ECDHE-ECDSA.

Perhaps there is a middlebox in the way that gets version negotiation wrong.  
Try adding the -tls1 flag.

It returns this with -tls1. I use latest precompiled version "openssl-1.0.2a-i386-win32". So you can't reproduce it? It is local then.

CONNECTED(000002FC)
3564:error:14094438:SSL routines:ssl3_read_bytes:tlsv1 alert internal error:.\ss
l\s3_pkt.c:1461:SSL alert number 80
3564:error:1409E0E5:SSL routines:ssl3_write_bytes:ssl handshake failure:.\ssl\s3
_pkt.c:645:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 7 bytes and written 0 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1
    Cipher    : 0000
    Session-ID:
    Session-ID-ctx:
    Master-Key:
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1430070431
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
_______________________________________________
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Reply via email to