How to fix curl SSLv3 alert handshake in OpenSSL?

How to fix curl SSLv3 alert handshake in OpenSSL?

$ openssl s_client -connect thepiratebay.se:443 CONNECTED (00000003) SSL handshake has read 2651 bytes and written 456 bytes New, TLSv1/SSLv3, Cipher is AES128-SHA Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE SSL-Session: Protocol : TLSv1 Cipher : AES128-SHA

What is the error code for curl error 35?

I had a problem like that. This message error ” cURL error 35: error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure (http_request_failed) ” apear on wordpress. I was trying to configure Jetpack of wordpress and I was using cloudflare.

Why does curl not work with OpenSSL 1.0?

In order to make curl work I downgraded it to the version that uses OpenSSL 1.0.2, which still supports RC4 ciphers. After that everything works flawlessly. I believe there are actually two somewhat overlapping problems here, both related to the server apparently being way out of date or else insanely operated.

Why is curl not working on Windows 10?

I’m trying to access the website https://www.lawsociety.com.au with curl on Windows 10 and Ubuntu 16.04. It works on Ubuntu, but fails on Windows with the message error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure.

What to do when SSL handshake is not working?

Select the cryptographic algorithm to be used. Authenticate each other by exchanging and validating digital certificates. When the client and server cannot establish communication using the TLS/SSL protocol, the client application receives an HTTP status 503 with the message Service Unavailable.

Is there a way to enable SSL in curl?

You could also try using the -3 aka –sslv3 switch, however, if curl was built without SSL3 support, then you need to compile your own version of curl, enabling SSL3. EDIT: The op has found the problem. I got confused by the error message. Basically, when you build openssl with the bindist flag, the elyptic curve crypto is disabled.

How to ignore or force the certificate using cURL?

How do I ignore or force the certificate using curl command line? When using wget seems to work fine. Also works when testing with openssl as below:

Why does curl hang while doing TLS handshake, CERT?

When I download from a https curl seems to be stuck while doing the TLS handshake, CERT. The problem is independent of the site (I noticed it using github) and wget is hanging too (although I didn’t look into the verbose outputs there).

Is there a way to force SSL 3.0?

Some sites disable support for SSL 3.0 (possible because of many exploits/vulnerabilities), so it’s possible to force specific SSL version by either -2 / –sslv2 or -3 / –sslv3 . Also -L is worth a try if requested page has moved to a different location.