SSL23_GET_SERVER_HELLO：sslv3警报握手失败 [英] SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

问题描述

我刚刚安装新版本的gitlab，在新安装ssl不工作后...它引发SSL23_GET_SERVER_HELLO：sslv3警报握手错误。 ssh工作正常。唯一的区别是我看到的是旧的浏览器说它使用TLS 1.0，而在新版本中它说1.2。因为这是与gitlab没有关系，我发布在stackoverflow中的问题...

  $ git克隆https：// gitlabserver / group / project.git 
克隆到'project'中... 
 *在_netrc文件中找不到主机gitlabserver;使用默认值
 *添加句柄：conn：0x282d6f8 
 *添加句柄：send：0 
 *添加句柄：recv：0 
 * Curl_addHandleToPipeline：length：1 
 * -  Conn 0（0x282d6f8）send_pipe：1，recv_pipe：0 
 *关于连接（）到gitlabserver端口443（＃0）
 *尝试gitlabserver ... 
 *连接到gitlabserver端口443（＃0）
 *成功设置证书验证位置：
 * CAfile：c：/Users/lanid/curl-ca-bundle.crt 
 CApath：none 
 *错误：14077410：SSL例程：SSL23_GET_SERVER_HELLO：sslv3警报握手失败
 
 *关闭连接0 
致命：无法访问'https：//gitlabserver/group/project.git/'：错误： 14077410：SSL例程：SSL23_GET_SERVER_HELLO：sslv3警报握手失败
  

以下是OpenSSL s_client 在使用TLS 1.0和SNI进行测试时输出：

  openssl s_client -connect< hostname>：< ;端口> -tls1 -servername<主机名> 
 
将屏幕加载到随机状态 - 完成
连接（00000208）
 8008：错误：14094410：SSL例程：SSL3_READ_BYTES：sslv3警报握手失败：.\ssl\\ \\ s3_pkt.c：1126：SSL警报编号40 
 8008：错误：1409E0E5：SSL例程：SSL3_WRITE_BYTES：ssl握手失败：.\ssl\s3_pkt.c：547：
  
 $ p 
 $ b 
另一台服务器具有相同设置但旧版本的工作文件相同的命令... 
解决方案
升级openssl解决了这个问题... 
 
i just installed new version of gitlab, after new installation ssl is not working... it throws SSL23_GET_SERVER_HELLO:sslv3 alert handshake error. ssh is working fine. only difference i see is in old browser says it is using TLS 1.0 and in new version it says 1.2. Since this is nothing to do with gitlab i posting the problem in stackoverflow...
$ git clone https://gitlabserver/group/project.git
Cloning into 'project'...
* Couldn't find host gitlabserver in the _netrc file; using defaults
* Adding handle: conn: 0x282d6f8
* Adding handle: send: 0
* Adding handle: recv: 0
* Curl_addHandleToPipeline: length: 1
* - Conn 0 (0x282d6f8) send_pipe: 1, recv_pipe: 0
* About to connect() to gitlabserver port 443 (#0)
*   Trying gitlabserver...
* Connected to gitlabserver port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: c:/Users/lanid/curl-ca-bundle.crt
  CApath: none
* error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure

* Closing connection 0
fatal: unable to access 'https://gitlabserver/group/project.git/': error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
Here is OpenSSL s_client output while testing with TLS 1.0 and SNI:
openssl s_client -connect <hostname>:<port> -tls1 -servername <hostname>

Loading 'screen' into random state - done
CONNECTED(00000208)
8008:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:.\ssl\s3_pkt.c:1126:SSL alert number 40
8008:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:.\ssl\s3_pkt.c:547:
Same command for another server with same setup but old version works file...
解决方案
Upgrading openssl resolved this issue...

                        
这篇关于SSL23_GET_SERVER_HELLO：sslv3警报握手失败的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！