{"action":"created","issue":{"url":"https://api.github.com/repos/PeterMosmans/openssl/issues/19","labels_url":"https://api.github.com/repos/PeterMosmans/openssl/issues/19/labels{/name}","comments_url":"https://api.github.com/repos/PeterMosmans/openssl/issues/19/comments","events_url":"https://api.github.com/repos/PeterMosmans/openssl/issues/19/events","html_url":"https://github.com/PeterMosmans/openssl/issues/19","id":73757325,"number":19,"title":"failed handshake","user":{"login":"drwetter","id":8036727,"avatar_url":"https://avatars.githubusercontent.com/u/8036727?v=3","gravatar_id":"","url":"https://api.github.com/users/drwetter","html_url":"https://github.com/drwetter","followers_url":"https://api.github.com/users/drwetter/followers","following_url":"https://api.github.com/users/drwetter/following{/other_user}","gists_url":"https://api.github.com/users/drwetter/gists{/gist_id}","starred_url":"https://api.github.com/users/drwetter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/drwetter/subscriptions","organizations_url":"https://api.github.com/users/drwetter/orgs","repos_url":"https://api.github.com/users/drwetter/repos","events_url":"https://api.github.com/users/drwetter/events{/privacy}","received_events_url":"https://api.github.com/users/drwetter/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-05-06T22:32:06Z","updated_at":"2015-05-07T05:43:03Z","closed_at":null,"body":"Hi Peter,\r\n\r\na problem which bites my testssl.sh (first example is openssl from a Linux distro, second yours:\r\n\r\n    prompt% openssl s_client -connect rechnung.dsl.o2online.de:443 -servername rechnung.dsl.o2online.de\r\n     CONNECTED(00000003)\r\n     depth=3 C = US, O = \"VeriSign, Inc.\", OU = Class 3 Public Primary Certification Authority\r\n     [..]\r\n     Server certificate\r\n     -----BEGIN CERTIFICATE-----\r\n    [..]\r\n    -----END CERTIFICATE-----\r\n     [..]\r\n     SSL handshake has read 4355 bytes and written 648 bytes\r\n     ---\r\n    New, TLSv1/SSLv3, Cipher is RC4-MD5\r\n    Server public key is 2048 bit\r\n    Secure Renegotiation IS NOT supported\r\n    Compression: NONE\r\n    Expansion: NONE\r\n    SSL-Session:\r\n        Protocol  : TLSv1\r\n        Cipher    : RC4-MD5\r\n    [..]\r\n    \r\n    prompt% echo $?\r\n    0\r\n    prompt%\r\n\r\nnow the one from you:\r\n\r\n    openssl64 s_client -connect rechnung.dsl.o2online.de:443 -servername  rechnung.dsl.o2online.de\r\n    CONNECTED(00000003)\r\n    139757631698832:error:140790E5:SSL routines:ssl23_write:ssl handshake failure:s23_lib.c:177:\r\n    ---\r\n    no peer certificate available\r\n    ---\r\n    No client certificate CA names sent\r\n    ---\r\n    SSL handshake has read 0 bytes and written 433 bytes\r\n    ---\r\n    New, (NONE), Cipher is (NONE)\r\n    Secure Renegotiation IS NOT supported\r\n    Compression: NONE\r\n    Expansion: NONE\r\n    No ALPN negotiated\r\n    ---\r\n    \r\n    prompt% echo $?\r\n    1\r\n    prompt%    \r\n\r\nFor some reason it fails here. Providing -tls1 would work.\r\n\r\nThat seems a showstopper for the next release of testssl.sh ;-/\r\n\r\nCheer, Dirk\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/PeterMosmans/openssl/issues/comments/99727616","html_url":"https://github.com/PeterMosmans/openssl/issues/19#issuecomment-99727616","issue_url":"https://api.github.com/repos/PeterMosmans/openssl/issues/19","id":99727616,"user":{"login":"drwetter","id":8036727,"avatar_url":"https://avatars.githubusercontent.com/u/8036727?v=3","gravatar_id":"","url":"https://api.github.com/users/drwetter","html_url":"https://github.com/drwetter","followers_url":"https://api.github.com/users/drwetter/followers","following_url":"https://api.github.com/users/drwetter/following{/other_user}","gists_url":"https://api.github.com/users/drwetter/gists{/gist_id}","starred_url":"https://api.github.com/users/drwetter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/drwetter/subscriptions","organizations_url":"https://api.github.com/users/drwetter/orgs","repos_url":"https://api.github.com/users/drwetter/repos","events_url":"https://api.github.com/users/drwetter/events{/privacy}","received_events_url":"https://api.github.com/users/drwetter/received_events","type":"User","site_admin":false},"created_at":"2015-05-07T05:43:03Z","updated_at":"2015-05-07T05:43:03Z","body":"Hi Peter,\n\nAm 7. Mai 2015 07:18:13 MESZ, schrieb Peter Mosmans <notifications@github.com>:\n>Hi @drwetter , \n>Question: which build (commit) of 1.0.2-chacha do you use ?\n>This was an issue quite some commits (and time) ago. If I check I get\n>the correct result:\n>\n>echo Q| openssl s_client -connect rechnung.dsl\n>.o2online.de:443 -servername rechnung.dsl.o2online.de && echo $?\n>CONNECTED(00000003)\n>depth=2 C = US, O = \"VeriSign, Inc.\", OU = VeriSign Trust Network, OU =\n>\"(c) 200\n>6 VeriSign, Inc. - For authorized use only\", CN = VeriSign Class 3\n>Public Primar\n>y Certification Authority - G5\n>verify error:num=20:unable to get local issuer certificate\n>verify return:0\n>\n>[snip]\n>New, TLSv1/SSLv3, Cipher is RC4-MD5\n>Server public key is 2048 bit\n>Secure Renegotiation IS NOT supported\n>Compression: NONE\n>Expansion: NONE\n>SSL-Session:\n>    Protocol  : TLSv1\n>    Cipher    : RC4-MD5\n>Session-ID:\n>EF1D000085FBD2A41F1361307D2A5E616BD59C1338AE7F9D00D9BDD5B49894F8\n>    Session-ID-ctx:\n>Master-Key:\n>0114FDC02A3A779947866E549ADB0E944B534806AB90F19E89A1B4716E1CDFA67941FEBD33BCBE46DBBDEE5AEC2EB545\n>    Key-Arg   : None\n>    PSK identity: None\n>    PSK identity hint: None\n>    SRP username: None\n>    Start Time: 1430975831\n>    Timeout   : 300 (sec)\n>    Verify return code: 20 (unable to get local issuer certificate)\n>---\n>DONE\n>0\n\nOh, ok! Sorry I missed that. Need to make new binaries then. Thx!\n\nHow is the other IIS6 server doing with your release?\n\nThe stupid thing is that testssl.sh needs a lot of workarounds -- only for broken IIS6/SChannel. \n\nCheers, Dirk\n\n\n"}}