Package: libssl0.9.8
Version: 0.9.8k-7
Severity: important

In try of open some https urls in curl, connection hang up:

$ curl -v -k -I https://w3s.wmtransfer.com/
* About to connect() to w3s.wmtransfer.com port 443 (#0)
*   Trying 212.118.48.159... connected
* Connected to w3s.wmtransfer.com (212.118.48.159) port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using RC4-MD5
* Server certificate:
* subject: O=WebMoney Transfer; OU=WebMoney Web Service; CN=w3s.wmtransfer.com
*        start date: 2006-04-01 11:00:53 GMT
*        expire date: 2010-06-07 19:47:18 GMT
*        common name: w3s.wmtransfer.com (matched)
* issuer: O=WebMoney Transfer; OU=WebMoney Certification Center; CN=WebMoney Transfer Root Authority * SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
HEAD / HTTP/1.1
User-Agent: curl/7.19.7 (x86_64-pc-linux-gnu) libcurl/7.19.7 OpenSSL/0.9.8k 
zlib/1.2.3.3 libidn/1.15 libssh2/1.2.1
Host: w3s.wmtransfer.com
Accept: */*

* SSLv3, TLS handshake, Hello request (0):
^C

But some https urls open normally (https://launchpad.net/ for example).

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.30-2-amd64 (SMP w/12 CPU cores)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libssl0.9.8 depends on:
ii debconf [debconf-2.0] 1.5.28 Debian configuration management sy
ii  libc6                  2.10.2-2          GNU C Library: Shared libraries
ii  zlib1g                 1:1.2.3.3.dfsg-15 compression library - runtime

libssl0.9.8 recommends no packages.

libssl0.9.8 suggests no packages.

-- debconf information excluded





--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to