Unable to establish SSL connection, how do I fix my SSL cert?

by

SSL23_GET_SERVER_HELLO:unknown protocol

This error happens when OpenSSL receives something other than a ServerHello in a protocol version it understands from the server. It can happen if the server answers with a plain (unencrypted) HTTP. It can also happen if the server only supports e.g. TLS 1.2 and the client does not understand that protocol version. Normally, servers are backwards compatible to at least SSL 3.0 / TLS 1.0, but maybe this specific server isn’t (by implementation or configuration).

It is unclear whether you attempted to pass --no-check-certificate or not. I would be rather surprised if that would work.

A simple test is to use wget (or a browser) to request http://example.com:443 (note the http://, not https://); if it works, SSL is not enabled on port 443. To further debug this, use openssl s_client with the -debug option, which right before the error message dumps the first few bytes of the server response which OpenSSL was unable to parse. This may help to identify the problem, especially if the server does not answer with a ServerHello message. To see what exactly OpenSSL is expecting, check the source: look for SSL_R_UNKNOWN_PROTOCOL in ssl/s23_clnt.c.

In any case, looking at the apache error log may provide some insight too.

More Related Contents:

  1. Obsolete cryptography warning from Browser
  2. How do I allow HTTPS for Apache on localhost?
  3. How do you redirect HTTPS to HTTP?
  4. ssl_error_rx_record_too_long and Apache SSL [closed]
  5. apache redirect http to https and www to non www
  6. How to stop Chrome from redirecting to HTTPS?
  7. SSL Connection Reset
  8. Do I need to convert .CER to .CRT for Apache SSL certificates? If so, how?
  9. tunneling secure websocket connections with apache
  10. How to hide the .html extension with Apache mod_rewrite
  11. How to debug .htaccess RewriteRule not working
  12. How to set TLS context options in Ruby (like OpenSSL::SSL::SSL_OP_NO_SSLv2)
  13. .htaccess rewrite query string as path
  14. How to redirect URLs based on query string?
  15. SSL operation failed with code 1: dh key too small
  16. You must enable the openssl extension to download files via https
  17. OpenSSL errors in python requests
  18. Adding VirtualHost fails: Access Forbidden Error 403 (XAMPP) (Windows 7)
  19. SSL Error: unable to get local issuer certificate
  20. “End of script output before headers” error in Apache
  21. mod_rewrite: remove query string from URL?
  22. What exactly is a pre-fork web server model?
  23. Apache won’t follow symlinks (403 Forbidden)
  24. Redirect HTTP to HTTPS on default virtual host without ServerName
  25. htaccess RewriteRule page with query string
  26. URL rewriting for different protocols in .htaccess
  27. Correct Apache AddType directives for font MIME types
  28. OpenSSL hangs during PKCS12 export with “Loading ‘screen’ into random state”
  29. How can I have CodeIgniter load specific pages using SSL?
  30. SSLError: sslv3 alert handshake failure

Leave a Comment