本文介绍了SSL23_GET_SERVER_HELLO:sslv3警报握手失败的处理方法,对大家解决问题具有一定的参考价值,需要的朋友们下面随着小编来一起学习吧!

问题描述

我刚刚安装新版本的gitlab,在新安装ssl不工作后...它引发SSL23_GET_SERVER_HELLO:sslv3警报握手错误。 ssh工作正常。唯一的区别是我看到的是旧的浏览器说它使用TLS 1.0,而在新版本中它说1.2。因为这是与gitlab没有关系,我发布在stackoverflow中的问题...

  $ git克隆https:// gitlabserver / group / project.git 
克隆到'project'中...
*在_netrc文件中找不到主机gitlabserver;使用默认值
*添加句柄:conn:0x282d6f8
*添加句柄:send:0
*添加句柄:recv:0
* Curl_addHandleToPipeline:length:1
* - Conn 0(0x282d6f8)send_pipe:1,recv_pipe:0
*关于连接()到gitlabserver端口443(#0)
*尝试gitlabserver ...
*连接到gitlabserver端口443(#0)
*成功设置证书验证位置:
* CAfile:c:/Users/lanid/curl-ca-bundle.crt
CApath:none
*错误:14077410:SSL例程:SSL23_GET_SERVER_HELLO:sslv3警报握手失败

*关闭连接0
致命:无法访问'https://gitlabserver/group/project.git/':错误: 14077410:SSL例程:SSL23_GET_SERVER_HELLO:sslv3警报握手失败

以下是OpenSSL s_client 在使用TLS 1.0和SNI进行测试时输出:

  openssl s_client -connect< hostname>:< ;端口> -tls1 -servername<主机名> 

将屏幕加载到随机状态 - 完成
连接(00000208)
8008:错误:14094410:SSL例程:SSL3_READ_BYTES:sslv3警报握手失败:.\ssl\\ \\ s3_pkt.c:1126:SSL警报编号40
8008:错误:1409E0E5:SSL例程:SSL3_WRITE_BYTES:ssl握手失败:.\ssl\s3_pkt.c:547:

$ p
$ b

另一台服务器具有相同设置但旧版本的工作文件相同的命令...

解决方案

升级openssl解决了这个问题...


i just installed new version of gitlab, after new installation ssl is not working... it throws SSL23_GET_SERVER_HELLO:sslv3 alert handshake error. ssh is working fine. only difference i see is in old browser says it is using TLS 1.0 and in new version it says 1.2. Since this is nothing to do with gitlab i posting the problem in stackoverflow...

$ git clone https://gitlabserver/group/project.git
Cloning into 'project'...
* Couldn't find host gitlabserver in the _netrc file; using defaults
* Adding handle: conn: 0x282d6f8
* Adding handle: send: 0
* Adding handle: recv: 0
* Curl_addHandleToPipeline: length: 1
* - Conn 0 (0x282d6f8) send_pipe: 1, recv_pipe: 0
* About to connect() to gitlabserver port 443 (#0)
*   Trying gitlabserver...
* Connected to gitlabserver port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: c:/Users/lanid/curl-ca-bundle.crt
  CApath: none
* error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

* Closing connection 0
fatal: unable to access 'https://gitlabserver/group/project.git/': error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

Here is OpenSSL s_client output while testing with TLS 1.0 and SNI:

openssl s_client -connect <hostname>:<port> -tls1 -servername <hostname>

Loading 'screen' into random state - done
CONNECTED(00000208)
8008:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:.\ssl\s3_pkt.c:1126:SSL alert number 40
8008:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:.\ssl\s3_pkt.c:547:

Same command for another server with same setup but old version works file...

解决方案

Upgrading openssl resolved this issue...

这篇关于SSL23_GET_SERVER_HELLO:sslv3警报握手失败的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持!

06-29 10:41