We encounter very strange problems connecting with openssl or curl to one of our servers, from Ubuntu 14.04
openssl s_client -connect ms.icometrix.com:443
CONNECTED(00000003) 140557262718624:error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error:s23_clnt.c:770:
A similar error when executing:
curl https://ms.icometrix.com curl: (35) error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error
Output of openssl version (on client/server):
OpenSSL 1.0.1f 6 Jan 2014
Output of openssl from dpkg -l openssl:
The funny thing is, the problem vanishes when connecting with other versions of Openssl:
- From a mac, OpenSSL 0.9.8zd 8 Jan 2015, all ok
- From centos, OpenSSL 1.0.1e-fips 11 Feb 2013, all ok
- Latest stable release on Ubuntu 14.04, OpenSSL 1.0.2d 9 Jul 2015, all ok.
From server side, we do not see anything strange. The problem started when we disabled SSL3 on our machines.
Might there be a problem with the build in the apt-get?
We also test other versions, the one proposed by apt-cache showpkg, but the problem remains...