Openssl s_client error ?

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

Openssl s_client error ?

FooCrypt
Hi

Im just testing openssl s_client against a server IP and it appears to be failing with the following. :

openssl s_client -showcerts -servername ${Site} -connect ${Site}:443 -debug </dev/null

OpenSSL 1.0.2u  20 Dec 2019 : 140337275680448:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:827:
OpenSSL 1.1.0l  10 Sep 2019 : 140642678284928:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:251:
OpenSSL 1.1.1a  20 Nov 2018 : 140267470374080:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
OpenSSL 1.1.1b  26 Feb 2019 : 140658956276928:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
OpenSSL 1.1.1c  28 May 2019 : 140313236694272:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
OpenSSL 1.1.1d  10 Sep 2019 : 140526368781568:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
OpenSSL 1.1.1e  17 Mar 2020 : 139985685132608:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
OpenSSL 1.1.1f  31 Mar 2020 : 139973563405632:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
OpenSSL 1.1.1g  21 Apr 2020 : 139893511771456:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
OpenSSL 1.1.1  11 Sep 2018 : 140632691274944:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:


Is this a server side issue / firewall / load balancer / issue ???


--

Regards,

Mark A. Lane  

© Mark A. Lane 1980 - 2020, All Rights Reserved.
© FooCrypt 1980 - 2020, All Rights Reserved.
© FooCrypt, A Tale of Cynical Cyclical Encryption. 1980 - 2020, All Rights Reserved.
© Cryptopocalypse 1980 - 2020, All Rights Reserved.

Reply | Threaded
Open this post in threaded view
|

Re: Openssl s_client error ?

Matt Caswell-2


On 27/04/2020 09:07, FooCrypt wrote:

> Hi
>
> Im just testing openssl s_client against a server IP and it appears to be failing with the following. :
>
> openssl s_client -showcerts -servername ${Site} -connect ${Site}:443 -debug </dev/null
>
> OpenSSL 1.0.2u  20 Dec 2019 : 140337275680448:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:827:
> OpenSSL 1.1.0l  10 Sep 2019 : 140642678284928:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:251:
> OpenSSL 1.1.1a  20 Nov 2018 : 140267470374080:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1b  26 Feb 2019 : 140658956276928:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1c  28 May 2019 : 140313236694272:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1d  10 Sep 2019 : 140526368781568:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1e  17 Mar 2020 : 139985685132608:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1f  31 Mar 2020 : 139973563405632:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1g  21 Apr 2020 : 139893511771456:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
> OpenSSL 1.1.1  11 Sep 2018 : 140632691274944:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:331:
>
>
> Is this a server side issue / firewall / load balancer / issue ???

Looks like the server is not responding with something that looks like
SSL/TLS. A wireshark trace might  tell you more.

Matt