SSL_ERROR_SYSCALL in connection to qa-api.ncl.com:443

 
Thread Tools Search this Thread
Top Forums UNIX for Beginners Questions & Answers SSL_ERROR_SYSCALL in connection to qa-api.ncl.com:443
# 1  
Old 01-22-2018
SSL_ERROR_SYSCALL in connection to qa-api.ncl.com:443

I am getting SSL_ERROR_SYSCALL in connection to qa-api.ncl.com:443. Please help me on this. But I am able to get response in Soap UI.
Moderator's Comments:
Mod Comment Please use CODE tags when displaying sample input, output, and code segments.

Last edited by Don Cragun; 01-23-2018 at 06:29 PM.. Reason: Add ICODE tags.
# 2  
Old 01-23-2018
From manual:-
Code:
SSL_ERROR_SYSCALL
Some I/O error occurred. The OpenSSL error queue may contain more information on the error. If the error queue is empty (i.e. ERR_get_error() returns 0),
ret can be used to find out more about the error: If ret == 0, an EOF was observed that violates the protocol. If ret == -1, 
the underlying BIO reported an I/O error (for socket I/O on Unix systems, consult errno for details).

Let us know how you are attempting to connect and check what is ret.
# 3  
Old 01-23-2018
Hi Yoda,

Thanks for the quick response.

I am trying to connect as below,

Code:
openssl s_client -showcerts -connect qa-api.ncl.com:443
CONNECTED(00000003)
write:errno=104
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 247 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE

Thanks,
Ayeesha
Moderator's Comments:
Mod Comment Please use CODE tags when displaying sample input, output, and code segments.

Last edited by Don Cragun; 01-23-2018 at 06:30 PM.. Reason: Add CODE tags.
# 4  
Old 01-23-2018
Please use code tags for code fragments or data samples in your post.

I found a thread in SO suggesting that this can be resolved by setting the TLS SNI (Server Name Indicator). So can you try:-
Code:
openssl s_client -showcerts -connect qa-api.ncl.com:443 -servername qa-api.ncl.com

# 5  
Old 01-23-2018
Yes I have tried as mentioned above, still same errno 104.
# 6  
Old 01-23-2018
Your error message indicate that the TCP connection was successful, but the handshake failed.

I guess this can be due to several reasons including a firewall, openssl version or TLS version e.t.c. But it is impossible say the reason by looking at this error message.

By the way which TLS version is supported, try specifying the version [-tls1] [-tls1_1] [-tls1_2] [-tls1_3], for example:-
Code:
openssl s_client -showcerts -connect qa-api.ncl.com:443 -tls1_2

# 7  
Old 01-23-2018
Actually before it was TLS1.0 , it was working fine and later endpoint server transition to TLS1.2 , from then onwards it is thrwoing errno 104.

I hope it's not firewall issue because in windows server and soap ui it's working fine.


openssl version
OpenSSL 1.0.1e-fips 11 Feb 2013


Code:
 openssl s_client -showcerts -connect qa-api.ncl.com:443 -tls1_2
CONNECTED(00000003)
write:errno=104
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 0 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : 0000
    Session-ID:
    Session-ID-ctx:
    Master-Key:
    Key-Arg   : None
    Krb5 Principal: None
    PSK identity: None
    PSK identity hint: None
    Start Time: 1516749422
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
---

Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. Cybersecurity

Continual knocking on port 443 from foreign IP address

Hello, I have a server in our DMZ that only has ports 80 and 443 open to the public networks. It runs webmail for our 10K employees' accounts. It's not necessary for our employees to access the server from anywhere except North America so I have blocked access from most of the world due to... (5 Replies)
Discussion started by: randomxs
5 Replies

2. HP-UX

How to open 443 port in HP-UX?

Hello Experts, I want to open the port 443 on my HP-UX system. can you please help ? Thanks in advance. (1 Reply)
Discussion started by: purushottamaher
1 Replies

3. IP Networking

DNS requests through SSH/443

Anybody know how to force all DNS requests through port 443 or an SSH tunnel such as Putty in Ubuntu 10.4? (2 Replies)
Discussion started by: 3therk1ll
2 Replies

4. Shell Programming and Scripting

Need to run an API from a script and extract fields from output of API

Hi, I need to call an API (GetUsageDetails)from inside a shell script which takes an input argument acct_nbr. The output of API will be like : <usageAccum accumId="450" accumCaptn="PM_125" inclUnits="1410.00" inclUnitsUsed="744.00" shared="true" pooled="false" prorated="false"... (1 Reply)
Discussion started by: rkrish
1 Replies

5. Solaris

Allow usage of port 80 and 443

I am trying to install Sun Java Web Server using an ordinary user with no root/sudo rights. I need to allow this web server to use ports 80 and 443. How can this be done?:confused: (1 Reply)
Discussion started by: emealogistics
1 Replies

6. UNIX for Advanced & Expert Users

squid: Allow access to only one site and only via 80 or 443

Can someone please give me the conf file line to allow access to myexample.com and only that site, and only through http and https? So far I have only that site accessible via http, but all https sites are opened. Squid 3.1 on Cent 6 ---------- Post updated at 12:06 PM ---------- Previous... (0 Replies)
Discussion started by: glev2005
0 Replies

7. UNIX for Advanced & Expert Users

Google Translate API with wget (only one client and connection): Suspected Terms of Service Abuse

Hi Script > grep translate .bashrc translate(){ wget -qO- "http://ajax.googleapis.com/ajax/services/language/translate?v=1.0&q=$1&langpair=$2|${3:-en}" | sed 's/.*"translatedText":"\(*\)".*}/\1\n/'; } error > translate "Ich will schwimmen" de en {"responseData": null,... (5 Replies)
Discussion started by: slashdotweenie
5 Replies

8. HP-UX

What is this error? 443?

# cat /var/log/messages | egrep -i "error|warn|critical|panic|exceed|alert|down|up" Jul 10 09:30:06 plbp1s nanny: shutting down 202.61.9.147:443 due to connection failure Jul 10 10:30:06 plbp1s nanny: shutting down 202.61.9.149:443 due to connection failure 443 is I understood it is port... (1 Reply)
Discussion started by: manalisharmabe
1 Replies

9. Solaris

Solaris 10 ftp connection problem (connection refused, connection timed out)

Hi everyone, I am hoping anyone of you could help me in this weird problem we have in 1 of our Solaris 10 servers. Lately, we have been having some ftp problems in this server. Though it can ping any server within the network, it seems that it can only ftp to a select few. For most servers, the... (4 Replies)
Discussion started by: labdakos
4 Replies
Login or Register to Ask a Question