{"action":"opened","issue":{"url":"https://api.github.com/repos/PeterMosmans/openssl/issues/19","labels_url":"https://api.github.com/repos/PeterMosmans/openssl/issues/19/labels{/name}","comments_url":"https://api.github.com/repos/PeterMosmans/openssl/issues/19/comments","events_url":"https://api.github.com/repos/PeterMosmans/openssl/issues/19/events","html_url":"https://github.com/PeterMosmans/openssl/issues/19","id":73757325,"number":19,"title":"failed handshake","user":{"login":"drwetter","id":8036727,"avatar_url":"https://avatars.githubusercontent.com/u/8036727?v=3","gravatar_id":"","url":"https://api.github.com/users/drwetter","html_url":"https://github.com/drwetter","followers_url":"https://api.github.com/users/drwetter/followers","following_url":"https://api.github.com/users/drwetter/following{/other_user}","gists_url":"https://api.github.com/users/drwetter/gists{/gist_id}","starred_url":"https://api.github.com/users/drwetter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/drwetter/subscriptions","organizations_url":"https://api.github.com/users/drwetter/orgs","repos_url":"https://api.github.com/users/drwetter/repos","events_url":"https://api.github.com/users/drwetter/events{/privacy}","received_events_url":"https://api.github.com/users/drwetter/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-05-06T22:32:06Z","updated_at":"2015-05-06T22:32:06Z","closed_at":null,"body":"Hi Peter,\r\n\r\na problem which bites my testssl.sh (first example is openssl from a Linux distro, second yours:\r\n\r\n    prompt% openssl s_client -connect rechnung.dsl.o2online.de:443 -servername rechnung.dsl.o2online.de\r\n     CONNECTED(00000003)\r\n     depth=3 C = US, O = \"VeriSign, Inc.\", OU = Class 3 Public Primary Certification Authority\r\n     [..]\r\n     Server certificate\r\n     -----BEGIN CERTIFICATE-----\r\n    [..]\r\n    -----END CERTIFICATE-----\r\n     [..]\r\n     SSL handshake has read 4355 bytes and written 648 bytes\r\n     ---\r\n    New, TLSv1/SSLv3, Cipher is RC4-MD5\r\n    Server public key is 2048 bit\r\n    Secure Renegotiation IS NOT supported\r\n    Compression: NONE\r\n    Expansion: NONE\r\n    SSL-Session:\r\n        Protocol  : TLSv1\r\n        Cipher    : RC4-MD5\r\n    [..]\r\n\r\n   prompt% echo $?\r\n   0\r\n   prompt%\r\n\r\nnow the one from you:\r\n\r\n    openssl64 s_client -connect rechnung.dsl.o2online.de:443 -servername  rechnung.dsl.o2online.de\r\n    CONNECTED(00000003)\r\n    139757631698832:error:140790E5:SSL routines:ssl23_write:ssl handshake failure:s23_lib.c:177:\r\n    ---\r\n    no peer certificate available\r\n    ---\r\n    No client certificate CA names sent\r\n    ---\r\n    SSL handshake has read 0 bytes and written 433 bytes\r\n    ---\r\n    New, (NONE), Cipher is (NONE)\r\n    Secure Renegotiation IS NOT supported\r\n    Compression: NONE\r\n    Expansion: NONE\r\n    No ALPN negotiated\r\n    ---\r\n\r\n   prompt% echo $?\r\n   1\r\n   prompt%    \r\n\r\nFor some reason it fails here. Providing -tls1 would work.\r\n\r\nThat seems a showstopper for the next release of testssl.sh ;-/\r\n\r\nCheer, Dirk\r\n\r\n\r\n"}}