aeris / cryptcheck

Verify some SSL/TLS website or XMPP implementation
GNU Affero General Public License v3.0
185 stars 20 forks source link

Error during analysis: sslv3 alert handshake failure #60

Closed extremelyonline closed 1 year ago

extremelyonline commented 1 year ago

Hi, when I tried to do a Cryptcheck on my website, it seems that Cryptcheck cannot reach. (Other sites such as this one work.)

The error is as follows. May I please ask what does this mean? Is this problem related to my cipher sets? Thank you.

Error during analysis: SSL_connect returned=1 errno=0 state=SSLv3 read server hello A: sslv3 alert handshake failure

aeris commented 1 year ago

Hello

Don't know what is your TLS config, but seems SSLLabs struggle to analyse your site too, and OpenSSL just hang too :

$ openssl s_client -connect opnxng.com:443
CONNECTED(00000003)
write:errno=104
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 316 bytes
Verification: OK
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
extremelyonline commented 1 year ago

I am not sure if this is the root cause, but the problem went away after I fixed the ciphers. Thanks!