php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #49527 curl: sslv3 alert handshake failure
Submitted: 2009-09-11 04:46 UTC Modified: 2009-10-03 22:53 UTC
From: lr at pcorp dot us Assigned:
Status: Closed Package: cURL related
PHP Version: 5.2.10 OS: Windows
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: lr at pcorp dot us
New email:
PHP Version: OS:

 

 [2009-09-11 04:46 UTC] lr at pcorp dot us
Description:
------------
We recently upgraded our windows php from 5.2.6 to 5.2.10 (using binaries provided on php website) and since then one of our apps that uses a CURL SSL connection has stopped working.  

Curl throws an error
error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure 

Reproduce code:
---------------
The code we had in prior versions of PHP that worked fine were
	curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
	curl_setopt($ch,CURLOPT_SSL_VERIFYPEER, 0);
	curl_setopt($ch,CURLOPT_SSLVERSION,3);
	curl_setopt($ch,CURLOPT_SSL_VERIFYHOST, 0);
	curl_setopt($ch, CURLOPT_URL, $somehttpsurlhere);
	curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
	

	$t = curl_exec($ch);
	if (curl_errno($ch)){
	    print curl_error($ch);
	}

Expected result:
----------------
Before this used to work and $t would have content of ssl page.

Unfortunately can't devulge the exact ssl sites since they are private client ones.  2 that we have tried don't work.

One uses an SSL cert issues by Comodo EV SGC CA

The other uses one issued by Thawte Premium Server CA (is a wildcard one).

Both certs register as fine in IE and Firefox.



Actual result:
--------------
Now gives 
error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure 

This might be just a change in how to deal with SSL connections, but couldn't find any documentation about curl or PHP website that was helpful in this regard.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2009-09-11 13:35 UTC] jani@php.net
What is the curl version in the 5.2.6 vs. 5.2.10? (and openssl), check from phpinfo().
 [2009-09-19 01:00 UTC] php-bugs at lists dot php dot net
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
 [2009-10-03 22:53 UTC] lr at pcorp dot us
Sorry I don't think I ever got this message.  Upgrading to PHP 5.2.11 fixed the problem for us.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Fri May 09 13:01:28 2025 UTC