SSL23_GET_SERVER_HELLO:sslv3 警报握手失败 [英] SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

问题描述

我刚刚安装了新版本的 gitlab，在新安装后 ssl 不起作用...它抛出 SSL23_GET_SERVER_HELLO:sslv3 警报握手错误.ssh 工作正常.我看到的唯一区别是旧浏览器说它使用 TLS 1.0，而在新版本中它说 1.2.由于这与 gitlab 无关，因此我在 stackoverflow 中发布了问题...

i just installed new version of gitlab, after new installation ssl is not working... it throws SSL23_GET_SERVER_HELLO:sslv3 alert handshake error. ssh is working fine. only difference i see is in old browser says it is using TLS 1.0 and in new version it says 1.2. Since this is nothing to do with gitlab i posting the problem in stackoverflow...

$ git clone https://gitlabserver/group/project.git
Cloning into 'project'...
* Couldn't find host gitlabserver in the _netrc file; using defaults
* Adding handle: conn: 0x282d6f8
* Adding handle: send: 0
* Adding handle: recv: 0
* Curl_addHandleToPipeline: length: 1
* - Conn 0 (0x282d6f8) send_pipe: 1, recv_pipe: 0
* About to connect() to gitlabserver port 443 (#0)
*   Trying gitlabserver...
* Connected to gitlabserver port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: c:/Users/lanid/curl-ca-bundle.crt
  CApath: none
* error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

* Closing connection 0
fatal: unable to access 'https://gitlabserver/group/project.git/': error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

这是使用 TLS 1.0 和 SNI 进行测试时的 OpenSSL s_client 输出:

Here is OpenSSL s_client output while testing with TLS 1.0 and SNI:

openssl s_client -connect <hostname>:<port> -tls1 -servername <hostname>

Loading 'screen' into random state - done
CONNECTED(00000208)
8008:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:.ssls3_pkt.c:1126:SSL alert number 40
8008:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:.ssls3_pkt.c:547:

对于具有相同设置但旧版本工作文件的另一台服务器的相同命令...

Same command for another server with same setup but old version works file...

推荐答案

升级 openssl 解决了这个问题...

Upgrading openssl resolved this issue...

这篇关于SSL23_GET_SERVER_HELLO:sslv3 警报握手失败的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！