CVSNT sserver SSL error

[Jason Williard]

I just installed CVSNT 2.5.03.2151 on a Red Hat Enterprise 4 server. OpenSSL
was previously installed with prefix /usr.  When I attempt to connect using
TortoiseCVS, I get the following error:

SSL connection failed (-1): error:1408F10B:SSL
routines:SSL3_GET_RECORD:wrong version number cvs.exe [import aborted]:
Connection to server failed

Does anyone know what could be wrong?

 
----
Thank You,
Jason Williard




______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]

[Kyle Hamilton]

Your client is trying to use SSLv2, or SSLv3, and the server is
configured to not allow that protocol.  (Or, the server isn't
configured to use any protocol.)

I don't know the specifics of how to configure what you're doing, but
I do know that there are environment variables available to specify
what protocol versions to accept.

-Kyle H

On 1/31/06, Jason Williard <[hidden email]> wrote:

> I just installed CVSNT 2.5.03.2151 on a Red Hat Enterprise 4 server. OpenSSL
> was previously installed with prefix /usr.  When I attempt to connect using
> TortoiseCVS, I get the following error:
>
> SSL connection failed (-1): error:1408F10B:SSL
> routines:SSL3_GET_RECORD:wrong version number cvs.exe [import aborted]:
> Connection to server failed
>
> Does anyone know what could be wrong?
>
>
> ----
> Thank You,
> Jason Williard
>
>
>
>
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [hidden email]
> Automated List Manager                           [hidden email]
>

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]

[Jason Williard]

> Your client is trying to use SSLv2, or SSLv3, and the server is
> configured to not allow that protocol.  (Or, the server isn't
> configured to use any protocol.)
>
> I don't know the specifics of how to configure what you're doing, but
> I do know that there are environment variables available to specify
> what protocol versions to accept.
>
> -Kyle H
>
> On 1/31/06, Jason Williard <[hidden email]> wrote:
> > I just installed CVSNT 2.5.03.2151 on a Red Hat Enterprise 4 server.
> OpenSSL
> > was previously installed with prefix /usr.  When I attempt to connect
> using
> > TortoiseCVS, I get the following error:
> >
> > SSL connection failed (-1): error:1408F10B:SSL
> > routines:SSL3_GET_RECORD:wrong version number cvs.exe [import aborted]:
> > Connection to server failed
> >
> > Does anyone know what could be wrong?
> >
> >
> > ----
> > Thank You,
> > Jason Williard

I considered this as a possibility.  The part that doesn't make sense is
that I was under the belief that OpenSSL v0.9.7i supports both SSLv2 &
SSLv3.  Is this correct?  


----
Thank You,
Jason Williard


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]

[Kyle Hamilton]

On 1/31/06, Jason Williard <[hidden email]> wrote:
>
> I considered this as a possibility.  The part that doesn't make sense is
> that I was under the belief that OpenSSL v0.9.7i supports both SSLv2 &
> SSLv3.  Is this correct?

It does, yes, but by default there's no ciphers or protocol versions
enabled.  (It also supports TLSv1.)  They have to be explicitly
enabled -- and a server certificate installed on the server -- before
SSL can be used at all.

You need to check the documentation for cvsNT to see how to properly
configure it.

-Kyle H
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]