[CalendarServer-users] SSL problems with 2.3 and trunk under Debian

[Mark Nipper]

On 05 Jan 2010, Cyrus Daboo wrote:
> So openssl was trying the v23 handshake and failing because the
> server only does v3. Try this:
> 
> >openssl s_client -connect host.example.com:8443 -debug -ssl3

	A little further:
---
CONNECTED(00000003)
write to 0xa870f0 [0xa92490] (87 bytes => 87 (0x57))
0000 - 16 03 00 00 52 01 00 00-4e 03 00 4b 43 65 e8 5d   ....R...N..KCe.]
0010 - aa 9a 76 51 60 a4 3a 24-27 a4 0f a3 0d 69 ed a9   ..vQ`.:$'....i..
0020 - a7 1d df 33 c1 40 3e 2d-bc 6d c6 00 00 26 00 39   ...3.@>-.m...&.9
0030 - 00 38 00 35 00 16 00 13-00 0a 00 33 00 32 00 2f   .8.5.......3.2./
0040 - 00 05 00 04 00 15 00 12-00 09 00 14 00 11 00 08   ................
0050 - 00 06 00 03 02 01                                 ......
0057 - <SPACES/NULS>
read from 0xa870f0 [0xa8dc80] (5 bytes => 5 (0x5))
0000 - 15 03 00 00 02                                    .....
read from 0xa870f0 [0xa8dc85] (2 bytes => 2 (0x2))
0000 - 02 28                                             .(
27443:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1061:SSL alert number 40
27443:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:s3_pkt.c:530:
---

-- 
Mark Nipper
nipsy at bitgnome.net (XMPP)
+1 979 575 3193
-
Generalizations are usually flawed by exceptions.
 -- seen at http://wunderland.com/