{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/2011","labels_url":"https://api.github.com/repos/docker/docker/issues/2011/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/2011/comments","events_url":"https://api.github.com/repos/docker/docker/issues/2011/events","html_url":"https://github.com/docker/docker/issues/2011","id":20126887,"number":2011,"title":"curl fails inside container on https connection","user":{"login":"yunmanger1","id":388285,"avatar_url":"https://avatars.githubusercontent.com/u/388285?v=3","gravatar_id":"","url":"https://api.github.com/users/yunmanger1","html_url":"https://github.com/yunmanger1","followers_url":"https://api.github.com/users/yunmanger1/followers","following_url":"https://api.github.com/users/yunmanger1/following{/other_user}","gists_url":"https://api.github.com/users/yunmanger1/gists{/gist_id}","starred_url":"https://api.github.com/users/yunmanger1/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yunmanger1/subscriptions","organizations_url":"https://api.github.com/users/yunmanger1/orgs","repos_url":"https://api.github.com/users/yunmanger1/repos","events_url":"https://api.github.com/users/yunmanger1/events{/privacy}","received_events_url":"https://api.github.com/users/yunmanger1/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":10,"created_at":"2013-09-26T18:20:17Z","updated_at":"2015-03-11T16:14:58Z","closed_at":"2013-09-27T17:34:09Z","body":"I come up with a problem that curl fails on this request from inside a docker container, but succeeds from the host machine. Any ideas why? Both host and container are ``ubuntu:12.04``. The problem is in openssl, because I am having the same issue when requesting from my Twisted app.\r\n\r\n\tcurl -kv https://ws.eisto.kz/sms/sms.ashx?regnumber=1-a167lko\r\n\t* About to connect() to ws.eisto.kz port 443 (#0)\r\n\t*   Trying 93.185.75.48... connected\r\n\t* successfully set certificate verify locations:\r\n\t*   CAfile: none\r\n\t  CApath: /etc/ssl/certs\r\n\t* SSLv3, TLS handshake, Client hello (1):\r\n\t* SSLv3, TLS handshake, Server hello (2):\r\n\t* SSLv3, TLS handshake, CERT (11):\r\n\t* SSLv3, TLS handshake, Server finished (14):\r\n\t* SSLv3, TLS handshake, Client key exchange (16):\r\n\t* SSLv3, TLS change cipher, Client hello (1):\r\n\t* SSLv3, TLS handshake, Finished (20):\r\n\t* SSLv3, TLS change cipher, Client hello (1):\r\n\t* SSLv3, TLS handshake, Finished (20):\r\n\t* SSL connection using AES256-SHA\r\n\t* Server certificate:\r\n\t* \t subject: CN=INSP.EISTO.KZ; serialNumber=IIN800517301165; C=KZ; L=\\U0410\\U0421\\U0422\\U0410\\U041D\\U0410; ST=\\U0410\\U0421\\U0422\\U0410\\U041D\\U0410; O=\\U0410\\U041A\\U0426\\U0418\\U041E\\U041D\\U0415\\U0420\\U041D\\U041E\\U0415 \\U041E\\U0411\\U0429\\U0415\\U0421\\U0422\\U0412\\U041E \"\\\r\n\t* \t start date: 2013-08-21 04:15:55 GMT\r\n\t* \t expire date: 2014-08-21 04:15:55 GMT\r\n\t* \t subjectAltName: ws.eisto.kz matched\r\n\t* \t issuer: CN=\\U041D\\U0423\\U0426 \\U0420\\U041A (RSA); OU=\\U0418\\U043D\\U0444\\U0440\\U0430\\U0441\\U0442\\U0440\\U0443\\U043A\\U0442\\U0443\\U0440\\U0430 \\U043E\\U0442\\U043A\\U0440\\U044B\\U0442\\U044B\\U0445 \\U043A\\U043B\\U044E\\U0447\\U0435\\U0439; O=\\U041D\\U0430\\U0446\\U0438\\U043E\\U043D\r\n\t* \t SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.\r\n\t> GET /sms/sms.ashx?regnumber=1-a167lko HTTP/1.1\r\n\t> User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.3.4 libidn/1.23 librtmp/2.3\r\n\t> Host: ws.eisto.kz\r\n\t> Accept: */*\r\n\t> \r\n\t* SSLv3, TLS handshake, Hello request (0):\r\n\t* SSLv3, TLS handshake, Client hello (1):\r\n\t* SSL read: error:00000000:lib(0):func(0):reason(0), errno 104\r\n\t* Closing connection #0\r\n\tcurl: (56) SSL read: error:00000000:lib(0):func(0):reason(0), errno 104\r\n\r\n\r\nCurl version\r\n\r\n\tcurl 7.29.0 (x86_64-pc-linux-gnu) libcurl/7.29.0 OpenSSL/1.0.1c zlib/1.2.7 libidn/1.25 librtmp/2.3\r\n\tProtocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtmp rtsp smtp smtps telnet tftp \r\n\tFeatures: GSS-Negotiate IDN IPv6 Largefile NTLM NTLM_WB SSL libz TLS-SRP "},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/78296360","html_url":"https://github.com/docker/docker/issues/2011#issuecomment-78296360","issue_url":"https://api.github.com/repos/docker/docker/issues/2011","id":78296360,"user":{"login":"glaszig","id":201135,"avatar_url":"https://avatars.githubusercontent.com/u/201135?v=3","gravatar_id":"","url":"https://api.github.com/users/glaszig","html_url":"https://github.com/glaszig","followers_url":"https://api.github.com/users/glaszig/followers","following_url":"https://api.github.com/users/glaszig/following{/other_user}","gists_url":"https://api.github.com/users/glaszig/gists{/gist_id}","starred_url":"https://api.github.com/users/glaszig/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/glaszig/subscriptions","organizations_url":"https://api.github.com/users/glaszig/orgs","repos_url":"https://api.github.com/users/glaszig/repos","events_url":"https://api.github.com/users/glaszig/events{/privacy}","received_events_url":"https://api.github.com/users/glaszig/received_events","type":"User","site_admin":false},"created_at":"2015-03-11T16:14:58Z","updated_at":"2015-03-11T16:14:58Z","body":"follow-up / solution: my docker containers are running inside a kvm/xen-vm and the issue was on the kvm/xen-provider's side. the paas provider informed me that the reason for the connectivity issues was something called LRO. this feature should be properly configured on machines acting like routers -- which every docker host effectively does. following are some links with deeper technical infos.\r\n\r\n- http://en.m.wikipedia.org/wiki/Large_receive_offload\r\n- http://kb.vmware.com/selfservice/microsites/search.dolanguage=en_US&cmd=displayKC&externalId=1027511\r\n- http://www.dell.com/support/article/us/en/19/SLN163744/EN"}}