Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error
1,010 views
Skip to first unread message
Teresa e Junior
Nov 20, 2014, 1:00:06 PM11/20/14
to
Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
https://www.basebit.com.br', it fails with the message:
curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1
alert internal error
I have done some research, and found suggestions that `curl --sslv3'
should work, but then I get:
curl: (35) error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
I have not been successful in trying to convince the website
administrator to restrict available ciphers in Tomcat's https connector,
as mentioned here:
http://georgik.sinusgear.com/2012/02/19/tomcat-7-and-curl-ssl23_get_server_hellotlsv1-alert-internal-error/
So I would like if it could be possible to get this working here on my
part! `curl --version' returns:
curl 7.26.0 (i486-pc-linux-gnu) libcurl/7.26.0 OpenSSL/1.0.1e zlib/1.2.7
libidn/1.25 libssh2/1.4.2 librtmp/2.3
Protocols: dict file ftp ftps gopher http https imap imaps ldap pop3
pop3s rtmp rtsp scp sftp smtp smtps telnet tftp
Features: Debug GSS-Negotiate IDN IPv6 Largefile NTLM NTLM_WB SSL libz
TLS-SRP
Thank you!
Teresa and Junior
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: https://lists.debian.org/546E2B59...@gmail.com
https://www.basebit.com.br', it fails with the message:
curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1
alert internal error
I have done some research, and found suggestions that `curl --sslv3'
should work, but then I get:
curl: (35) error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
I have not been successful in trying to convince the website
administrator to restrict available ciphers in Tomcat's https connector,
as mentioned here:
http://georgik.sinusgear.com/2012/02/19/tomcat-7-and-curl-ssl23_get_server_hellotlsv1-alert-internal-error/
So I would like if it could be possible to get this working here on my
part! `curl --version' returns:
curl 7.26.0 (i486-pc-linux-gnu) libcurl/7.26.0 OpenSSL/1.0.1e zlib/1.2.7
libidn/1.25 libssh2/1.4.2 librtmp/2.3
Protocols: dict file ftp ftps gopher http https imap imaps ldap pop3
pop3s rtmp rtsp scp sftp smtp smtps telnet tftp
Features: Debug GSS-Negotiate IDN IPv6 Largefile NTLM NTLM_WB SSL libz
TLS-SRP
Thank you!
Teresa and Junior
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: https://lists.debian.org/546E2B59...@gmail.com
songbird
Nov 20, 2014, 3:00:06 PM11/20/14
to
Teresa e Junior wrote:
> Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
> https://www.basebit.com.br', it fails with the message:
> curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1
> alert internal error
>
> I have done some research, and found suggestions that `curl --sslv3'
> should work, but then I get:
> curl: (35) error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
>
> I have not been successful in trying to convince the website
> administrator to restrict available ciphers in Tomcat's https connector,
> as mentioned here:
> http://georgik.sinusgear.com/2012/02/19/tomcat-7-and-curl-ssl23_get_server_hellotlsv1-alert-internal-error/
>
> So I would like if it could be possible to get this working here on my
> part! `curl --version' returns:
> curl 7.26.0 (i486-pc-linux-gnu) libcurl/7.26.0 OpenSSL/1.0.1e zlib/1.2.7
> libidn/1.25 libssh2/1.4.2 librtmp/2.3
> Protocols: dict file ftp ftps gopher http https imap imaps ldap pop3
> pop3s rtmp rtsp scp sftp smtp smtps telnet tftp
> Features: Debug GSS-Negotiate IDN IPv6 Largefile NTLM NTLM_WB SSL libz
> TLS-SRP
>
> Thank you!
> Teresa and Junior
i'm certainly not a wizard when it comes to this sort of thing,
> Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
> https://www.basebit.com.br', it fails with the message:
> curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1
> alert internal error
>
> I have done some research, and found suggestions that `curl --sslv3'
> should work, but then I get:
> curl: (35) error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
>
> I have not been successful in trying to convince the website
> administrator to restrict available ciphers in Tomcat's https connector,
> as mentioned here:
> http://georgik.sinusgear.com/2012/02/19/tomcat-7-and-curl-ssl23_get_server_hellotlsv1-alert-internal-error/
>
> So I would like if it could be possible to get this working here on my
> part! `curl --version' returns:
> curl 7.26.0 (i486-pc-linux-gnu) libcurl/7.26.0 OpenSSL/1.0.1e zlib/1.2.7
> libidn/1.25 libssh2/1.4.2 librtmp/2.3
> Protocols: dict file ftp ftps gopher http https imap imaps ldap pop3
> pop3s rtmp rtsp scp sftp smtp smtps telnet tftp
> Features: Debug GSS-Negotiate IDN IPv6 Largefile NTLM NTLM_WB SSL libz
> TLS-SRP
>
> Thank you!
> Teresa and Junior
but have you tried --sslv2 instead?
i think ssl3 has been largely removed from many places because
of exploits/vulnerabilities.
songbird
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Teresa e Junior
Nov 20, 2014, 3:20:05 PM11/20/14
to
Hello, songbird!
On Thu, 20 Nov 2014 14:45:42 -0500, songbird wrote:
> i'm certainly not a wizard when it comes to this sort of thing,
> but have you tried --sslv2 instead?
curl --sslv2 https://www.basebit.com.br
curl: (4) OpenSSL was built without SSLv2 support
Teresa e Junior
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: https://lists.debian.org/546E4AAE...@gmail.com
On Thu, 20 Nov 2014 14:45:42 -0500, songbird wrote:
> i'm certainly not a wizard when it comes to this sort of thing,
> but have you tried --sslv2 instead?
curl: (4) OpenSSL was built without SSLv2 support
Teresa e Junior
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Teresa e Junior
Nov 21, 2014, 12:10:07 PM11/21/14
to
On Thu, 20 Nov 2014 15:56:41 -0200, Teresa e Junior wrote:
> Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
> https://www.basebit.com.br', it fails with the message: curl: (35)
> error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert
> internal error
>
> I have done some research, and found suggestions that `curl --sslv3'
> should work, but then I get: curl: (35) error:1408F10B:SSL
> routines:SSL3_GET_RECORD:wrong version number
>
> I have not been successful in trying to convince the website
> administrator to restrict available ciphers in Tomcat's https
> connector, as mentioned here:
> http://georgik.sinusgear.com/2012/02/19/tomcat-7-and-curl-ssl23_get_server_hellotlsv1-alert-internal-error/
>
> So I would like if it could be possible to get this working here on
> my part! `curl --version' returns: curl 7.26.0 (i486-pc-linux-gnu)
> libcurl/7.26.0 OpenSSL/1.0.1e zlib/1.2.7 libidn/1.25 libssh2/1.4.2
> librtmp/2.3 Protocols: dict file ftp ftps gopher http https imap
> imaps ldap pop3 pop3s rtmp rtsp scp sftp smtp smtps telnet tftp
> Features: Debug GSS-Negotiate IDN IPv6 Largefile NTLM NTLM_WB SSL
> libz TLS-SRP
>
> Thank you!
>Teresa and Junior
Maybe recompiling cURL or OpenSSL would help me solving this problem?
> Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
> https://www.basebit.com.br', it fails with the message: curl: (35)
> error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert
> internal error
>
> I have done some research, and found suggestions that `curl --sslv3'
> should work, but then I get: curl: (35) error:1408F10B:SSL
> routines:SSL3_GET_RECORD:wrong version number
>
> I have not been successful in trying to convince the website
> administrator to restrict available ciphers in Tomcat's https
> connector, as mentioned here:
> http://georgik.sinusgear.com/2012/02/19/tomcat-7-and-curl-ssl23_get_server_hellotlsv1-alert-internal-error/
>
> So I would like if it could be possible to get this working here on
> my part! `curl --version' returns: curl 7.26.0 (i486-pc-linux-gnu)
> libcurl/7.26.0 OpenSSL/1.0.1e zlib/1.2.7 libidn/1.25 libssh2/1.4.2
> librtmp/2.3 Protocols: dict file ftp ftps gopher http https imap
> imaps ldap pop3 pop3s rtmp rtsp scp sftp smtp smtps telnet tftp
> Features: Debug GSS-Negotiate IDN IPv6 Largefile NTLM NTLM_WB SSL
> libz TLS-SRP
>
> Thank you!
>Teresa and Junior
I also see libcurl3 has two "flavors": libcurl3 (OpenSSL) and
libcurl3-gnutls (GnuTLS). I have both are installed.
Thanks for your attention!
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Curt
Nov 21, 2014, 1:00:05 PM11/21/14
to
On 2014-11-20, Teresa e Junior <teresa...@gmail.com> wrote:
> Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
> https://www.basebit.com.br', it fails with the message:
> curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1
> alert internal error
>
Works for me when I do
> Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
> https://www.basebit.com.br', it fails with the message:
> curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1
> alert internal error
>
curl -L https://www.basebit.com.br
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Teresa e Junior
Nov 21, 2014, 1:10:04 PM11/21/14
to
On Fri, 21 Nov 2014 17:58:53 +0000 (UTC), Curt wrote:
> On 2014-11-20, Teresa e Junior <teresa...@gmail.com> wrote:
>
>> Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
>> https://www.basebit.com.br', it fails with the message: curl: (35)
>> error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert
>> internal error
>>
>
> Works for me when I do
>
> curl -L https://www.basebit.com.br
>
With curl 7.26.0-1+wheezy11? If your version is newer, I thought maybe I
> On 2014-11-20, Teresa e Junior <teresa...@gmail.com> wrote:
>
>> Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
>> https://www.basebit.com.br', it fails with the message: curl: (35)
>> error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert
>> internal error
>>
>
> Works for me when I do
>
> curl -L https://www.basebit.com.br
>
could backport it from Jessie, but I don't know which package has the
problem here, if cURL, OpenSSL, GnuTLS, etc.
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Curt
Nov 21, 2014, 1:20:07 PM11/21/14
to
On 2014-11-21, Teresa e Junior <teresa...@gmail.com> wrote:
>>
>> Works for me when I do
>>
>> curl -L https://www.basebit.com.br
>>
>
> With curl 7.26.0-1+wheezy11? If your version is newer, I thought maybe I
> could backport it from Jessie, but I don't know which package has the
> problem here, if cURL, OpenSSL, GnuTLS, etc.
>
My version is older, as I'm using Squeeze LTS.
>>
>> Works for me when I do
>>
>> curl -L https://www.basebit.com.br
>>
>
> With curl 7.26.0-1+wheezy11? If your version is newer, I thought maybe I
> could backport it from Jessie, but I don't know which package has the
> problem here, if cURL, OpenSSL, GnuTLS, etc.
>
curty@einstein:~$ curl --version
curl 7.21.0 (x86_64-pc-linux-gnu) libcurl/7.21.0 OpenSSL/0.9.8o zlib/1.2.3.4 libidn/1.15 libssh2/1.2.6
Protocols: dict file ftp ftps http https imap imaps ldap ldaps pop3 pop3s rtsp scp sftp smtp smtps telnet tftp
Features: GSS-Negotiate IDN IPv6 Largefile NTLM SSL libz
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Teresa e Junior
Nov 21, 2014, 1:20:08 PM11/21/14
to
>> With curl 7.26.0-1+wheezy11? If your version is newer, I thought maybe I
>> could backport it from Jessie, but I don't know which package has the
>> problem here, if cURL, OpenSSL, GnuTLS, etc.
>>
>
> My version is older, as I'm using Squeeze LTS.
>
> curty@einstein:~$ curl --version
> curl 7.21.0 (x86_64-pc-linux-gnu) libcurl/7.21.0 OpenSSL/0.9.8o zlib/1.2.3.4 libidn/1.15 libssh2/1.2.6
> Protocols: dict file ftp ftps http https imap imaps ldap ldaps pop3 pop3s rtsp scp sftp smtp smtps telnet tftp
> Features: GSS-Negotiate IDN IPv6 Largefile NTLM SSL libz
>
Oh, I see, thank you!
>> could backport it from Jessie, but I don't know which package has the
>> problem here, if cURL, OpenSSL, GnuTLS, etc.
>>
>
> My version is older, as I'm using Squeeze LTS.
>
> curty@einstein:~$ curl --version
> curl 7.21.0 (x86_64-pc-linux-gnu) libcurl/7.21.0 OpenSSL/0.9.8o zlib/1.2.3.4 libidn/1.15 libssh2/1.2.6
> Protocols: dict file ftp ftps http https imap imaps ldap ldaps pop3 pop3s rtsp scp sftp smtp smtps telnet tftp
> Features: GSS-Negotiate IDN IPv6 Largefile NTLM SSL libz
>
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Chris Bannister
Nov 22, 2014, 12:10:05 PM11/22/14
to
On Fri, Nov 21, 2014 at 04:17:20PM -0200, Teresa e Junior wrote:
> >>With curl 7.26.0-1+wheezy11? If your version is newer, I thought maybe I
> >>could backport it from Jessie, but I don't know which package has the
> >>problem here, if cURL, OpenSSL, GnuTLS, etc.
> >>
> >
> >My version is older, as I'm using Squeeze LTS.
> >
> >curty@einstein:~$ curl --version
> >curl 7.21.0 (x86_64-pc-linux-gnu) libcurl/7.21.0 OpenSSL/0.9.8o zlib/1.2.3.4 libidn/1.15 libssh2/1.2.6
> >Protocols: dict file ftp ftps http https imap imaps ldap ldaps pop3 pop3s rtsp scp sftp smtp smtps telnet tftp
> >Features: GSS-Negotiate IDN IPv6 Largefile NTLM SSL libz
> >
>
> Oh, I see, thank you!
JFTR.
> >>With curl 7.26.0-1+wheezy11? If your version is newer, I thought maybe I
> >>could backport it from Jessie, but I don't know which package has the
> >>problem here, if cURL, OpenSSL, GnuTLS, etc.
> >>
> >
> >My version is older, as I'm using Squeeze LTS.
> >
> >curty@einstein:~$ curl --version
> >curl 7.21.0 (x86_64-pc-linux-gnu) libcurl/7.21.0 OpenSSL/0.9.8o zlib/1.2.3.4 libidn/1.15 libssh2/1.2.6
> >Protocols: dict file ftp ftps http https imap imaps ldap ldaps pop3 pop3s rtsp scp sftp smtp smtps telnet tftp
> >Features: GSS-Negotiate IDN IPv6 Largefile NTLM SSL libz
> >
>
> Oh, I see, thank you!
On jessie, I get this:
tal% curl -L https://www.basebit.com.br
curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error
tal% curl --version
curl 7.38.0 (i586-pc-linux-gnu) libcurl/7.38.0 OpenSSL/1.0.1j zlib/1.2.8
libidn/1.29 libssh2/1.4.3 librtmp/2.3
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps
pop3 pop3s rtmp rtsp scp sftp smtp smtps telnet tftp
Features: AsynchDNS IDN IPv6 Largefile GSS-API SPNEGO NTLM NTLM_WB SSL
libz TLS-SRP
tal% apt-cache policy curl
curl:
Installed: 7.38.0-2
--
"If you're not careful, the newspapers will have you hating the people
who are being oppressed, and loving the people who are doing the
oppressing." --- Malcolm X
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Teresa e Junior
Nov 22, 2014, 2:10:03 PM11/22/14
to
On Thu, 20 Nov 2014 15:56:41 -0200, Teresa e Junior wrote:
> Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
> https://www.basebit.com.br', it fails with the message:
> curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1
> alert internal error
This works:
> Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
> https://www.basebit.com.br', it fails with the message:
> curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1
> alert internal error
curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Teresa e Junior
Nov 23, 2014, 11:30:04 AM11/23/14
to
On Mon, 24 Nov 2014 05:20:23 +1300, Chris Bannister wrote:
>
> tal% curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
> curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
If Wheezy goes LTS too, I'll probably remain using it for as long as I can.
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: https://lists.debian.org/547209EF...@gmail.com
> On Sat, Nov 22, 2014 at 05:03:19PM -0200, Teresa e Junior wrote:
>> On Thu, 20 Nov 2014 15:56:41 -0200, Teresa e Junior wrote:
>>> Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
>>> https://www.basebit.com.br', it fails with the message:
>>> curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1
>>> alert internal error
>>
>> This works:
>> curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
>
> I get this:
>> On Thu, 20 Nov 2014 15:56:41 -0200, Teresa e Junior wrote:
>>> Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
>>> https://www.basebit.com.br', it fails with the message:
>>> curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1
>>> alert internal error
>>
>> This works:
>> curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
>
>
> tal% curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
> curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
If Wheezy goes LTS too, I'll probably remain using it for as long as I can.
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Curt
Nov 23, 2014, 11:30:04 AM11/23/14
to
On 2014-11-23, Chris Bannister <cbann...@slingshot.co.nz> wrote:
>>
>> This works:
>> curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
>
>>
>> This works:
>> curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
>
> I get this:
>
> tal% curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
> curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
>
Ditto.
>
> tal% curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
> curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
>
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Chris Bannister
Nov 23, 2014, 11:30:06 AM11/23/14
to
On Sat, Nov 22, 2014 at 05:03:19PM -0200, Teresa e Junior wrote:
> On Thu, 20 Nov 2014 15:56:41 -0200, Teresa e Junior wrote:
> >Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
> >https://www.basebit.com.br', it fails with the message:
> >curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1
> >alert internal error
>
> This works:
> curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
> On Thu, 20 Nov 2014 15:56:41 -0200, Teresa e Junior wrote:
> >Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
> >https://www.basebit.com.br', it fails with the message:
> >curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1
> >alert internal error
>
> This works:
> curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
I get this:
tal% curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
tal% curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
--
"If you're not careful, the newspapers will have you hating the people
who are being oppressed, and loving the people who are doing the
oppressing." --- Malcolm X
"If you're not careful, the newspapers will have you hating the people
who are being oppressed, and loving the people who are doing the
oppressing." --- Malcolm X
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: https://lists.debian.org/20141123162023.GC12221@tal
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Teresa e Junior
Nov 23, 2014, 12:20:04 PM11/23/14
to
On Sun, 23 Nov 2014 16:24:06 +0000 (UTC), Curt wrote:
> On 2014-11-23, Chris Bannister <cbann...@slingshot.co.nz> wrote:
>>>
>>> This works:
>>> curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
>>
>> I get this:
>>
>> tal% curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
>> curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
>>
>
> Ditto.
They must have changed the server configuration all today, because
> On 2014-11-23, Chris Bannister <cbann...@slingshot.co.nz> wrote:
>>>
>>> This works:
>>> curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
>>
>> I get this:
>>
>> tal% curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
>> curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
>>
>
> Ditto.
yesterday it worked, and so I implemented the shell script. But today
the script would not work, and then I got the same errors you both have
mentioned...
Teresa e Junior
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Curt
Nov 23, 2014, 12:40:04 PM11/23/14
to
On 2014-11-23, Teresa e Junior <teresa...@gmail.com> wrote:
>
> They must have changed the server configuration all today, because
> yesterday it worked, and so I implemented the shell script. But today
> the script would not work, and then I got the same errors you both have
> mentioned...
>
And with the 'L' flag, it doesn't work for you either?
>
> They must have changed the server configuration all today, because
> yesterday it worked, and so I implemented the shell script. But today
> the script would not work, and then I got the same errors you both have
> mentioned...
>
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Teresa e Junior
Nov 23, 2014, 12:50:05 PM11/23/14
to
On Sun, 23 Nov 2014 17:30:34 +0000 (UTC), Curt wrote:
> On 2014-11-23, Teresa e Junior <teresa...@gmail.com> wrote:
>>
>> They must have changed the server configuration all today, because
>> yesterday it worked, and so I implemented the shell script. But
>> today the script would not work, and then I got the same errors you
>> both have mentioned...
>>
>
> And with the 'L' flag, it doesn't work for you either?
Today the ciphers AES128-SHA, AES128-SHA256, AES256-SHA, and
> On 2014-11-23, Teresa e Junior <teresa...@gmail.com> wrote:
>>
>> They must have changed the server configuration all today, because
>> yesterday it worked, and so I implemented the shell script. But
>> today the script would not work, and then I got the same errors you
>> both have mentioned...
>>
>
> And with the 'L' flag, it doesn't work for you either?
AES256-SHA256 work. I don't know if this is something they change at
will, and so I'm not sure how I should implement this in a shell script,
but I'm doing it this way:
$ curl --ciphers 'DHE-RSA-AES256-SHA AES128-SHA AES128-SHA256 AES256-SHA
AES256-SHA256' https://www.basebit.com.br
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Chris Bannister
Nov 23, 2014, 6:20:03 PM11/23/14
to
On Sun, Nov 23, 2014 at 02:23:11PM -0200, Teresa e Junior wrote:
> On Mon, 24 Nov 2014 05:20:23 +1300, Chris Bannister wrote:
> >On Sat, Nov 22, 2014 at 05:03:19PM -0200, Teresa e Junior wrote:
> >>On Thu, 20 Nov 2014 15:56:41 -0200, Teresa e Junior wrote:
> >>>Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
> >>>https://www.basebit.com.br', it fails with the message:
> >>>curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1
> >>>alert internal error
> >>
> >>This works:
> >>curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
> >
> >I get this:
> >
> >tal% curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
> >curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
>
> If Wheezy goes LTS too, I'll probably remain using it for as long as I can.
It might have something to do with Bug#770447
> On Mon, 24 Nov 2014 05:20:23 +1300, Chris Bannister wrote:
> >On Sat, Nov 22, 2014 at 05:03:19PM -0200, Teresa e Junior wrote:
> >>On Thu, 20 Nov 2014 15:56:41 -0200, Teresa e Junior wrote:
> >>>Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
> >>>https://www.basebit.com.br', it fails with the message:
> >>>curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1
> >>>alert internal error
> >>
> >>This works:
> >>curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
> >
> >I get this:
> >
> >tal% curl --ciphers DHE-RSA-AES256-SHA https://www.basebit.com.br
> >curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
>
> If Wheezy goes LTS too, I'll probably remain using it for as long as I can.
--
"If you're not careful, the newspapers will have you hating the people
who are being oppressed, and loving the people who are doing the
oppressing." --- Malcolm X
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: https://lists.debian.org/20141123231225.GA24820@tal
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Scott Ferguson
Nov 23, 2014, 7:20:04 PM11/23/14
to
On 21/11/14 04:56, Teresa e Junior wrote:
> Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
> https://www.basebit.com.br', it fails with the message:
> curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1
> alert internal error
>
> I have done some research, and found suggestions that `curl --sslv3'
> should work, but then I get:
> curl: (35) error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
>
> I have not been successful in trying to convince the website
> administrator to restrict available ciphers in Tomcat's https connector,
> as mentioned here:
> http://georgik.sinusgear.com/2012/02/19/tomcat-7-and-curl-ssl23_get_server_hellotlsv1-alert-internal-error/
>
>
> So I would like if it could be possible to get this working here on my
> part! `curl --version' returns:
> curl 7.26.0 (i486-pc-linux-gnu) libcurl/7.26.0 OpenSSL/1.0.1e zlib/1.2.7
> libidn/1.25 libssh2/1.4.2 librtmp/2.3
> Protocols: dict file ftp ftps gopher http https imap imaps ldap pop3
> pop3s rtmp rtsp scp sftp smtp smtps telnet tftp
> Features: Debug GSS-Negotiate IDN IPv6 Largefile NTLM NTLM_WB SSL libz
> TLS-SRP
>
> Thank you!
> Teresa and Junior
>
>
I also get this failure (curl 7.26.0-1+wheezy):-
> Hello! I am using curl 7.26.0-1+wheezy11, and when I run `curl
> https://www.basebit.com.br', it fails with the message:
> curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1
> alert internal error
>
> I have done some research, and found suggestions that `curl --sslv3'
> should work, but then I get:
> curl: (35) error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
>
> I have not been successful in trying to convince the website
> administrator to restrict available ciphers in Tomcat's https connector,
> as mentioned here:
> http://georgik.sinusgear.com/2012/02/19/tomcat-7-and-curl-ssl23_get_server_hellotlsv1-alert-internal-error/
>
>
> So I would like if it could be possible to get this working here on my
> part! `curl --version' returns:
> curl 7.26.0 (i486-pc-linux-gnu) libcurl/7.26.0 OpenSSL/1.0.1e zlib/1.2.7
> libidn/1.25 libssh2/1.4.2 librtmp/2.3
> Protocols: dict file ftp ftps gopher http https imap imaps ldap pop3
> pop3s rtmp rtsp scp sftp smtp smtps telnet tftp
> Features: Debug GSS-Negotiate IDN IPv6 Largefile NTLM NTLM_WB SSL libz
> TLS-SRP
>
> Thank you!
> Teresa and Junior
>
>
curl https://www.basebit.com.br
curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1
alert internal error
The site uses "PKCS #1 SHA-256 With RSA Encryption"
alert internal error
(TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, 128-bit keys)
so... *this works*:-
curl --ciphers SHA256 https://www.basebit.com.br
curl 7.26.0-1+wheezy
Kind regards
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Teresa e Junior
Nov 23, 2014, 7:30:05 PM11/23/14
to
Today it doesn't, so I came up with these: AES128-SHA AES128-SHA256
AES256-SHA AES256-SHA256
Your solution is much simpler, thank you!
Teresa e Junior
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Teresa e Junior
Nov 23, 2014, 7:50:04 PM11/23/14
to
On Mon, 24 Nov 2014 11:41:56 +1100, Scott Ferguson wrote:
> For completeness, you'll find this works also:-
> curl --ciphers AES128-SHA256 https://www.basebit.com.br
Thank you!
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Archive: https://lists.debian.org/54727F67...@gmail.com
> For completeness, you'll find this works also:-
> curl --ciphers AES128-SHA256 https://www.basebit.com.br
Thank you!
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
Scott Ferguson
Nov 23, 2014, 7:50:05 PM11/23/14
to
On 24/11/14 11:25, Teresa e Junior wrote:
> On Mon, 24 Nov 2014 11:10:35 +1100, Scott Ferguson wrote:
>> On 21/11/14 04:56, Teresa e Junior wrote:
<snipped>
> On Mon, 24 Nov 2014 11:10:35 +1100, Scott Ferguson wrote:
>> On 21/11/14 04:56, Teresa e Junior wrote:
>
> Your solution is much simpler, thank you!
My pleasure.
> Your solution is much simpler, thank you!
For completeness, you'll find this works also:-
curl --ciphers AES128-SHA256 https://www.basebit.com.br
>
>
Kind regards
--
To UNSUBSCRIBE, email to debian-us...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org
0 new messages