curl: sslv3 alert handshake failure
asked 2014-11-15 17:02:21 +0200
I'm trying to use curl(1) to connecto to a remote host, but:
$ curl -vk1I https://hugo.barrera.io
* Rebuilt URL to: https://hugo.barrera.io/
* Hostname was NOT found in DNS cache
* Trying 174.136.104.18...
* Connected to hugo.barrera.io (174.136.104.18) port 443 (#0)
* successfully set certificate verify locations:
* CAfile: none
CApath: /etc/ssl/certs/
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS alert, Server hello (2):
* error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
* Closing connection 0
curl: (35) error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
I honestly have no idea what the error means. I've looked around for a while, and found no details on this.
I used -k to make sure it was not a CA error. I used -1 to make sure curl(1) did not use ssl instead of tls.
Running curl -I https://hugo.barrera.io on the desktop works fine:
$ curl -kIv1 https://hugo.barrera.io
* Rebuilt URL to: https://hugo.barrera.io/
* Hostname was NOT found in DNS cache
* Trying 2607:f2f8:a520::2...
* Trying 174.136.104.18...
* Immediate connect fail for 174.136.104.18: Network is unreachable
* Connected to hugo.barrera.io (2607:f2f8:a520::2) port 443 (#0)
* successfully set certificate verify locations:
* CAfile: /etc/ssl/certs/ca-certificates.crt
CApath: none
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server key exchange (12):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* Server certificate:
* subject: description=CJrYx2krow43w6My; C=AR; CN=hugo.barrera.io; emailAddress=postmaster@barrera.io
* start date: 2014-02-25 14:40:04 GMT
* expire date: 2015-02-26 14:39:26 GMT
* issuer: C=IL; O=StartCom Ltd.; OU=Secure Digital Certificate Signing; CN=StartCom Class 1 Primary Intermediate Server CA
* SSL certificate verify ok.
> HEAD / HTTP/1.1
> User-Agent: curl/7.39.0
> Host: hugo.barrera.io
> Accept: */*
>
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< Server: nginx/1.7.6
Server: nginx/1.7.6
< Date: Sat, 15 Nov 2014 14:59:23 GMT
Date: Sat, 15 Nov 2014 14:59:23 GMT
< Content-Type: text/html
Content-Type: text/html
< Content-Length: 6471
Content-Length: 6471
< Last-Modified: Mon, 03 Nov 2014 17:09:24 GMT
Last-Modified: Mon, 03 Nov 2014 17:09:24 GMT
< Connection: keep-alive
Connection: keep-alive
< ETag: "5457b6c4-1947"
ETag: "5457b6c4-1947"
< Strict-Transport-Security: max-age=31536000
Strict-Transport-Security: max-age=31536000
< X-Frame-Options: SAMEORIGIN
X-Frame-Options: SAMEORIGIN
< Accept-Ranges: bytes
Accept-Ranges: bytes
<
* Connection #0 to host hugo.barrera.io left intact
