On 27/04/2020 09:07, FooCrypt wrote:
> Hi
>
> Im just testing openssl s_client against a server IP and it appears to be
> failing with the following. :
>
> openssl s_client -showcerts -servername ${Site} -connect ${Site}:443 -debug
> </dev/null
>
> OpenSSL 1.0.2u 20 Dec 2019 : 140337275680448:error:140770FC:SSL
> routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:827:
> OpenSSL 1.1.0l 10 Sep 2019 : 140642678284928:error:1408F10B:SSL
> routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:251:
> OpenSSL 1.1.1a 20 Nov 2018 : 140267470374080:error:1408F10B:SSL
> routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1b 26 Feb 2019 : 140658956276928:error:1408F10B:SSL
> routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1c 28 May 2019 : 140313236694272:error:1408F10B:SSL
> routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1d 10 Sep 2019 : 140526368781568:error:1408F10B:SSL
> routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1e 17 Mar 2020 : 139985685132608:error:1408F10B:SSL
> routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1f 31 Mar 2020 : 139973563405632:error:1408F10B:SSL
> routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1g 21 Apr 2020 : 139893511771456:error:1408F10B:SSL
> routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1 11 Sep 2018 : 140632691274944:error:1408F10B:SSL
> routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
>
>
> Is this a server side issue / firewall / load balancer / issue ???
Looks like the server is not responding with something that looks like
SSL/TLS. A wireshark trace might tell you more.
Matt