Hello,
Our C++ application uses libcurl 7.21.0 linked to openssl-1.0.0m to implement a
variety of functionalities, including SMTP mail transfer.
The application runs on numerous platforms of different versions, including
Windows, Solaris 10/11 SPARC, Solaris 10/11 Intel, AIX6.1/7.1, different
flavors and versions of Linux.
We set up a test scenario in which we send an email using the same email server
and account, utilizing TLSv1, SSLv2, SSLv3 protocols.
The scenario successfully sends an email via any SSL protocol from any client
platform, with the exception of Solaris 10 SPARC, where TLSv1 and SSLv2 fail
with the following error message:
INFO_HEADER_OUT:
STARTTLS
INFO_HEADER_IN:
220 2.0.0 SMTP server ready
INFO_TEXT:
SSLv3, TLS handshake, Client hello (1):
INFO_TEXT:
SSLv3, TLS handshake, Server hello (2):
INFO_TEXT:
SSLv3, TLS handshake, CERT (11):
INFO_TEXT:
SSLv3, TLS handshake, Server finished (14):
INFO_TEXT:
SSLv3, TLS handshake, Client
key exchange (16):
INFO_TEXT:
SSLv3, TLS change cipher, Client hello (1):
INFO_TEXT:
SSLv3, TLS handshake, Finished (20):
INFO_TEXT:
Unknown SSL protocol error in connection to our-server.com:<port>
INFO_HEADER_OUT:
QUIT
Solaris 10 (SSLv3 only):
$> /qahome2/alona/OTIC> ldd libcurl.so
libdl.so.1 => /lib/libdl.so.1
libldap.so.5 => /usr/lib/libldap.so.5
librt.so.1 => /lib/librt.so.1
libsocket.so.1 => /lib/libsocket.so.1
libnsl.so.1 => /lib/libnsl.so.1
libssl.so.1.0.0 => /qahome2/alona/OTIC/libssl.so.1.0.0
libcrypto.so.1.0.0 => /qahome2/alona/OTIC/libcrypto.so.1.0.0
libz.so.1 => /usr/lib/libz.so.1
libc.so.1 => /lib/libc.so.1
libsasl.so.1 => /usr/lib/libsasl.so.1
libmd.so.1 => /lib/libmd.so.1
libnspr4.so => /usr/lib/mps/libnspr4.so
libplc4.so => /usr/lib/mps/libplc4.so
libnss3.so => /usr/lib/mps/libnss3.so
libssl3.so => /usr/lib/mps/libssl3.so
libaio.so.1 => /lib/libaio.so.1
libmp.so.2 => /lib/libmp.so.2
libscf.so.1 => /lib/libscf.so.1
libpthread.so.1 => /lib/libpthread.so.1
libnssutil3.so => /usr/lib/mps/libnssutil3.so
libplds4.so => /usr/lib/mps/libplds4.so
libthread.so.1 => /lib/libthread.so.1
libdoor.so.1 => /lib/libdoor.so.1
libuutil.so.1 => /lib/libuutil.so.1
libgen.so.1 => /lib/libgen.so.1
libm.so.2 => /lib/libm.so.2
/platform/SUNW,Sun-Fire-T1000/lib/libc_psr.so.1
/platform/SUNW,Sun-Fire-T1000/lib/libmd_psr.so.1
/usr/lib/mps/cpu/sparcv8plus/libnspr_flt4.so
Solaris 11(all SSL versions):
/export/home/alona/OTIC> ldd libcurl.so
libdl.so.1 => /lib/libdl.so.1
libidn.so.11 => /usr/lib/libidn.so.11
libldap.so.5 => /usr/lib/libldap.so.5
libsocket.so.1 => /lib/libsocket.so.1
libnsl.so.1 => /lib/libnsl.so.1
libssl.so.1.0.0 => /export/home/alona/OTIC/libssl.so.1.0.0
libcrypto.so.1.0.0 => /export/home/alona/OTIC/libcrypto.so.1.0.0
libz.so.1 => /lib/libz.so.1
libc.so.1 => /lib/libc.so.1
libsasl.so.1 => /usr/lib/libsasl.so.1
libmd.so.1 => /lib/libmd.so.1
libnspr4.so => /usr/lib/mps/libnspr4.so
libplc4.so => /usr/lib/mps/libplc4.so
libnss3.so => /usr/lib/mps/libnss3.so
libssl3.so => /usr/lib/mps/libssl3.so
libmp.so.2 => /lib/libmp.so.2
libsoftcrypto.so.1 => /lib/libsoftcrypto.so.1
libelf.so.1 => /lib/libelf.so.1
libpthread.so.1 => /lib/libpthread.so.1
librt.so.1 => /lib/librt.so.1
libnssutil3.so => /usr/lib/mps/libnssutil3.so
libplds4.so => /usr/lib/mps/libplds4.so
libthread.so.1 => /lib/libthread.so.1
libcryptoutil.so.1 => /lib/libcryptoutil.so.1
libm.so.2 => /lib/libm.so.2
/lib/libm/libm_hwcap1.so.2
/usr/lib/mps/cpu/sparcv8plus/libnspr_flt4.so
/export/home/alona/OTIC>
Can someone explain failure to support TLSv1 and SSLv2 on one platform?
Thank you,
Alona
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
