SSL Site Access

[Mark Vantzelfde]

I am trying to use php fopen() or file_get_content() to access the GTFS data for the MBTA at https://cdn.mbtace.com. I haven't yet discovered the right set of context options to successfully get the files. Getting errors:

SSL operation failed with code 1. OpenSSL Error messages:
error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure in ...
PHP Warning:  file_get_contents() [<a href='function.file-get-contents'>function.file-get-contents</a>]: Failed to enable crypto in ...

Any suggestions would be appreciated.

--
 

Mark Vantzelfde

[Developer at MBTA]

Hi Mark,

We changed some SSL configuration on our side; give it another shot. If that doesn't work, let us know which version of PHP you're on.

Sincerely,

Developer@MBTA

[Mark Vantzelfde]

Still doesn't work as before the shift to ssl. I'll send error log info.

--
You received this message because you are subscribed to the Google Groups "MBTA Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to massdotdevelopers+unsubscribe@googlegroups.com.
To post to this group, send email to massdotdevelopers@googlegroups.com.
Visit this group at https://groups.google.com/group/massdotdevelopers.
For more options, visit https://groups.google.com/d/optout.

--

Mark Vantzelfde

GIS/NetMasters, Inc.

[Greg]

error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

I know very little about PHP (I'm a C# developer) but it sounds like your PHP client doesn't support TLS, only SSL.

This site analyzer page shows that cdn.mbtace.com only supports TLS 1.0, 1.1 and 1.2 and not SSL 2 nor SSL 3:

https://www.ssllabs.com/ssltest/analyze.html?d=cdn.mbtace.com&latest

Which is good because SSL 3 is no longer secure so shouldn't be used:

https://www.digitalocean.com/community/tutorials/how-to-protect-your-server-against-the-poodle-sslv3-vulnerability

Here's a page that shows in detail what versions of SSL/TLS your client supports : https://www.ssllabs.com/ssltest/viewMyClient.html

So it sounds like you'll need to figure out how to enable TLS in your PHP client.

Hope that helps,

Greg