【发布时间】:2018-05-15 04:13:59
【问题描述】:
我目前无法在 Mac 上使用 openSSL 版本 1.0.2 连接到特定网站,例如 Morning.com。尝试使用不同的密码和 tls 版本,但错误仍然相同。检查数据包捕获,我在客户端打招呼后立即看到一条警报消息 (21)。
相同的命令在运行相同 openSSL 版本的 Ubuntu 机器上运行良好。
mac $ /usr/local/Cellar/openssl/1.0.2m/bin/openssl s_client -connect morning.com:443 -cipher ECDHE-RSA-AES128-GCM-SHA256 -debug -msg
CONNECTED(00000003)
write to 0x7fc070800060 [0x7fc071001000] (140 bytes => 140 (0x8C))
0000 - 16 03 01 00 87 01 00 00-83 03 03 bc a8 fc c3 41 ...............A
0010 - 54 d9 b4 dd d7 b7 67 09-7f 20 36 d5 1b bc 38 2e T.....g.. 6...8.
0020 - 6d 79 b5 64 56 64 87 9d-0d 35 f0 00 00 04 c0 2f my.dVd...5...../
0030 - 00 ff 02 01 00 00 55 00-0b 00 04 03 00 01 02 00 ......U.........
0040 - 0a 00 1c 00 1a 00 17 00-19 00 1c 00 1b 00 18 00 ................
0050 - 1a 00 16 00 0e 00 0d 00-0b 00 0c 00 09 00 0a 00 ................
0060 - 23 00 00 00 0d 00 20 00-1e 06 01 06 02 06 03 05 #..... .........
0070 - 01 05 02 05 03 04 01 04-02 04 03 03 01 03 02 03 ................
0080 - 03 02 01 02 02 02 03 00-0f 00 01 01 ............
>>> TLS 1.2 [length 0005]
16 03 01 00 87
>>> TLS 1.2 Handshake [length 0087], ClientHello
01 00 00 83 03 03 bc a8 fc c3 41 54 d9 b4 dd d7
b7 67 09 7f 20 36 d5 1b bc 38 2e 6d 79 b5 64 56
64 87 9d 0d 35 f0 00 00 04 c0 2f 00 ff 02 01 00
00 55 00 0b 00 04 03 00 01 02 00 0a 00 1c 00 1a
00 17 00 19 00 1c 00 1b 00 18 00 1a 00 16 00 0e
00 0d 00 0b 00 0c 00 09 00 0a 00 23 00 00 00 0d
00 20 00 1e 06 01 06 02 06 03 05 01 05 02 05 03
04 01 04 02 04 03 03 01 03 02 03 03 02 01 02 02
02 03 00 0f 00 01 01
read from 0x7fc070800060 [0x7fc071006600] (7 bytes => 7 (0x7))
0000 - 15 03 03 00 02 02 28 ......(
<<< TLS 1.2 [length 0005]
15 03 03 00 02
<<< TLS 1.2 Alert [length 0002], fatal handshake_failure
02 28
140735808668680:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:800:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 7 bytes and written 140 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : 0000
Session-ID:
Session-ID-ctx:
Master-Key:
Key-Arg : None
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1512104354
Timeout : 300 (sec)
Verify return code: 0 (ok)
---
关于为什么 mac 不会打开到 Morning.com 的连接的任何提示?能够连接到其他网页,例如 google 和 facebook。
【问题讨论】:
-
Stack Overflow 是一个编程和开发问题的网站。这个问题似乎离题了,因为它与编程或开发无关。请参阅帮助中心的What topics can I ask about here。也许Super User 或Unix & Linux Stack Exchange 会是一个更好的提问地点。
标签: macos encryption openssl